Privacy Compliance
Privacy compliance strategy, identifying roles as data controller or processor, and operationalizing processes for honoring consumer privacy rights. Privacy policies, choice mechanisms, consent management tools, and industry frameworks. Data governance materials, including data mapping, processing records, and internal policies. Team training. Data localization requirements and international data transfer restrictions. Vendor due diligence materials and responses. Obligations for use of pixels, cookies, SDKs, and other tracking technologies on digital properties, including websites, mobile apps, and connected television. Use of pseudonymous personal data for targeted advertising and profiling.
Product Design and Risk Assessments
Identify data privacy, cybersecurity, artificial intelligence, and related considerations as part of product design and development. Conduct data protection and artificial intelligence risk assessments.
Data Broker Obligations
Data monetization strategies and corresponding legal requirements for commercial data providers, including state data broker registration requirements and related regulatory obligations.
Highly Regulated Industries
Strategies and guardrails for digital advertising in highly regulated industries.
Sensitive Data
Requirements and limitations on handling sensitive categories of data, including information related to children, teens, and students.
Artificial Intelligence and Advanced Technologies
Policies and practices for the responsible use of artificial intelligence, automated decision making, machine learning, and large language models. Privacy enhancing technologies and data de-identification techniques. Use of advanced technologies for data modeling and use of inferred data.
Cybersecurity
Assist cyber teams in developing policies and procedures for cybersecurity and incident response.
Regulatory Inquiries
Respond to regulatory inquiries and investigations.
Acquisitions and Investments
Evaluate data assets as part of M&A and investment due diligence activities.
Contracts
Data sharing agreements, data protection addendums, and data licensing deals. Data security requirements and terms for technical and organizational measures. Intellectual property provisions to protect proprietary data and technology. Technology transactions, enterprise software, and professional services agreements. Advertiser-agency master services agreements. AdTech and MarTech contracts. Commercial agreements for other data-driven advertising and marketing products and services.
Advertising Law
Lead generation, telemarketing, performance marketing, and direct marketing. Compliance reviews under federal and state false advertising and consumer protection laws and regulations.