Michael H. Email & Phone Number

San Francisco, California, United States

United States

Automates risk assessments in OneTrust and TrustArc. freeing resources to accelerate the expansion of clients' privacy programs.Develops and drafts operations overviews, procedural manuals, and privacy department policies for Privacy Threshold Assessments (PTAs), Data Transfer Impact Assessments (DTIAs), and Third Party Risk Assessments (TPRAs).Drafts and updates layered privacy notices for compliance with privacy laws in CA, CO, CT, FL, MT, NJ, TX, UT, VA, GDPR, and India.

Dallas, Texas, United States

Leveraged territorial scope of GDPR to support GRC, legal and sales teams in the drafting of competitive contracts, data protection agreements, and the implementation of revised standard contractual clauses.Used OneTrust to create automated Data Protection Impact Assessments (DPIAs), CCPA and ePrivacy Directive compliant cookie consent banner templates, establish data inventories, and map data flows.Mapped GDPR, CCPA, EU-U.S. Data Privacy Framework, NIST, PCI DSS and SOC Controls, and Privacy by Design principles in one unified cross-walk document to ensure that compliance with one framework guaranteed compliance with others.

New York City Metropolitan Area

Simplified internal risk controls by condensing 571 unique risk controls into 50 standard controls for use across 14 risk categories.Led team of analysts in the regular audits of processing activities across Meta family of products, identifying privacy risks, and recommending mitigations. Reduced rate of non-compliance to Acceptable Quality Limit (AQL) below 3%. Drafted reports for executive review.Drafted Privacy Program Quality Control Audit Manual for evaluating processing activities across all of Meta's Family of Products.Contributed privacy related articles to knowledge base.

Orange, New Jersey, United States

Monitored district's operations and processing activities to ensure compliance with COPPA and FERPA during the switch to online learning during the pandemic.

Newark, Nj

Devised strategy for using CAN-SPAM privacy regulations to notify constituents of their privacy rights under the federal Family Educational Rights Privacy Act (FERPA) while engaging them using direct marketing without processing personally identifiable information or sensitive data belonging to children.Using the generic direct mail strategy increased enrollment for the 2016-2017 school year 397%, from 1,693 to 6,733,. Increased enrollment also increased total student funding revenue from $77M to $82.6M.Provided district-wide training to 38 departments on the appropriate handling of children's personal data as sensitive information.Supported the gap analyses of master service and data protection agreements to ensure that service providers meet privacy notice and parental consent requirements, or that they adequately support the district in its provision of notice and parental consents.

Master Of Jurisprudence, Intellectual Property Law

Bfa, Fine Arts, Advertising, Web Design

Master Of Jurisprudence, Cybersecurity & Privacy Law