Melissa Krasnow

She counsels companies on US federal and state privacy and security laws (HIPAA, financial services regulatory laws, education laws, Children’s Online Privacy Protection Act, CPRA/other state consumer privacy laws, state biometric privacy laws, state consumer health data privacy laws, federal and state artificial intelligence (AI)/automated decision-making technology (ADMT) laws, European Union General Data Protection Regulation (GDPR), and Data Privacy Framework).

Melissa advises companies on privacy, data security, AI/ADMT, big data, technology, and governance, including incident response (HIPAA and state laws, tabletop exercises, and crisis management AI and data incidents (ransomware, account takeover, business email compromise, phishing, and vulnerabilities)), preparing written information security programs, and vendor/subcontractor management. She counsels boards of directors and officers on privacy, data security, AI/ADMT, and technology risk oversight and developments, and reviews cyber liability insurance policies.

Melissa advises companies on regulatory inquiries and complying with state, federal, and international privacy, data security, AI/ADMT, advertising and marketing, governance and compliance, and regulated industry laws. She prepares website and mobile application privacy policies and terms.

Melissa works with companies on negotiating (and renegotiating in the wake of data breaches/incidents/other events) and documenting technology and commercial transactions, including master services agreements (MSAs), non-disclosure agreements (NDAs), data security addenda (DSAs), business associate agreements (BAAs), data license agreements (DLAs), GDPR and other data processing agreements (DPAs), CCPA/CPRA and other state privacy law, and AI/ADMT agreements.

In mergers and acquisitions (due diligence and agreements), she counsels companies on privacy, data security, AI/ADMT, and technology matters and on foreign investment filing obligations.