Subject matter expert in global data protection laws. Drafting and negotiating data processing agreements, service provider agreements, and cybersecurity terms. Reviewing data protection terms within master service agreements and SaaS agreements. Fielding data privacy questions from global sales, marketing, security, product and engineering teams under GDPR, DORA, NIS2, FADP, PIPL, CCPA/CPRA, APPI, PIPEDA, POPIA, FTC section 5, other global laws. Drafting legal memoranda, policies, and public-facing notices. Advising global information security team on privacy and security incidents and coordinating with outside counsel as necessary. Conducted 2023 global audit/assessment. Providing training to leaderships, legal, and sales teams on privacy/security laws/regulations. Assisting marketing/sales team in creating and acting as an SME on webinars.

Developed and maintained subject-matter expertise in privacy and information security laws, including CCPA/CPRA, VCDPA, CPA, UCPA, HIPAA, GLBA; Monitored and analyzed federal and state privacy and data security legislation and case law; Drafted/approved privacy and security policies and procedures; Conducted privacy risk assessments on third-party service providers; Analyzed third-party vendor agreements, data processing agreements, and NDAs as part of contract negotiations; Assisted and advised information security team on inquiries under ISO 27001, PCI-DSS, and SOC2 audits; Managed privacy and security incident response; Advised systems/security architects on data mapping and data flows. Drafted compliance impacted assessment on GDPR.

Assisted General Counsel and Chief Compliance Officer in managing a legal and regulatory compliance program under a $100 billion portfolio of mortgage-backed securities. Analyzed federal and state statutes, case law, and regulations to assess impact to operations and advised business units on corresponding changes to internal controls. Conducted legal research and drafted legal memoranda. Drafted mortgage extension agreements, lien extensions, and other legal documents. Reported all law changes to the executive management committee on a monthly basis. Conducted gap analyses and 50 state surveys on data breach notification laws, statute of limitation requirements on promissory notes and mortgages, and other legal issues. GLBA, TCPA, FCRA, FDCPA, FACTA, TCPA, SCRA, bankruptcy and foreclosure laws.

Conducted research on health privacy and data protection as part of a white paper submitted to the United States Congress on HIPAA legislation. Research focused on consumer expectations of privacy with regards to electronic personal health information and a comparative analysis of EU privacy and data protection law and US privacy laws.