Practice
What we do?
We advise the business through all stages of product development lifecycle focusing on commercial viability and regulatory requirements. Additionally product counsel can ensure that the different components of the business stay connected. What makes our practice unique is the experience of having worked as counsel and developer/architect, devops automation engineer, information security leadership, and privacy expert. Additionally, we can help support product sales to ensure that contracts are correct and help to advance the business in meaningful and compliant ways.
What we do?
Artificial Intelligence is one of, if not the latest and most rapidly developing area of technology. How you use this technology can have a rippling effect on your risk profile ranging from how you are sourcing data, training machines, and developing results. Given our experience working with emerging AI technologies with large leaders in the space as well as our ongoing study on how the technology is created and used, we are an excellent partner to help you realize your AI goals.
What we do?
Privacy is one of the most rapidly changing areas of law with a significant risk if it is not done correctly. There is a constantly changing alphabet soup of requirements the vary from country to country, and region/state within countries. We are experienced with both US and European requirements and hold IAPP certifications of CIPP for both US and EU regulations. We can help to ensure that you have a privacy program that meets legal, regulatory, and best practice requirements. We are strong collaborators and will work with your team, or help stand one up if needed. Addtionally, we can fill the role of Privacy Officer if that is needed.
What we do?
Another broad topic, Information Security law includes SOX compliance for publicly traded US firms, GLBA for financial firms, FTC rules for US companies, HIPAA requirements for health care, etc... If you are storing, handling, transmitting data, or shipping products that include encryption, there are many Information security considerations that must be addressed. Holding a CISSP certification, we are versed in best practices for Information Security programs that are appropriately sized for your business needs.
What we do?
Business is a complex and risk endeavor. We can help with general business contracts including sales, data handling, commercial leases, transfer or ownership and formation. We can also help implement control frameworks that may not be required by law but are best practices for your industry such as PCI DSS, NIST, ISO, FedRAMP, COSO, etc.
We can also help evaluate and improve your policy management practices to improve overall quality as well as to improve your compliance and risk posture. Having a good policy management process in place will help ensure that the right decisions are being made by the right people in timely fashion.