State AI Laws and the Federal EO: Effective Dates, Scope, Enforcement and Compliance Planning

Ms. Freedman practices in data privacy and security law, and complex litigation. She focuses her practice on compliance with all state and federal privacy and security laws and regulations, and counsels clients on state and federal data privacy and security investigations and data breaches. Among other areas, she advises clients on HIPAA compliance programs, employee awareness training patient portals, data use and sharing agreements for health information exchanges software, and cloud vendor agreements.

Ms. Krasnow advises companies on privacy, data security, technology matters, and cyber governance, including data breaches/incidents/other events (ransomware, account takeover, business email compromise, phishing, and vulnerabilities), preparing written information security programs (organizational and employee), devising incident response plans, and facilitating and participating in tabletop exercises. She counsels boards of directors and officers on privacy, data security, and technology risk oversight and developments, and reviews cyber liability insurance policies. Ms. Krasnow advises companies on regulatory inquiries and complying with state, federal, and international privacy and data security, advertising and marketing, governance and compliance, and regulated industry laws. She prepares website and mobile application privacy policies and terms (including regarding the GDPR, CPRA and other state privacy laws, geolocation, big data, and artificial intelligence/chatbots), and technology policies. Ms. Krasnow works with companies on negotiating (and renegotiating in the wake of data breaches/incidents/other events) and documenting technology and commercial transactions, including master services agreements, non-disclosure agreements, data security addenda, business associate agreements, data license agreements, GDPR and other data processing agreements, and CPRA and other state privacy law agreements.