Examples of Kimberly’s experience include:

• Advised clients on a broad range of data protection laws, including the FTC Act, FCRA, GLBA, CAN-SPAM, TCPA, COPPA, CCPA, CPRA, BIPA, and other U.S.-based privacy legislation.
• Advised on drafting privacy policies and procedures and developing internal compliance programs, including consumer and employee notices; data breach preparation, response, and notification; and employee training.
• Counseled on data security incidents, including evaluating incidents, assisting with communication, insurance compliance, incident vendor selection, and data breach notification statutes.
• Advised on marketing strategies and deployment of technology including 1st and 3rd party applications.
• Advised on the adoption and implementation of new technologies including AI, biometrics, facial recognition, blockchain, and non-fungible tokens (NFTs).
• Drafted and negotiated service provider agreements and DPAs for compliance with international data protection law compliance, including GDPR, EU Privacy Directive, PIPEDA, ARPPIPS, PIPL, and LGPD among others.