Karin E. Ross

Karin E. Ross focuses her practice on data privacy, cybersecurity, and technology transactions. Karin counsels a diverse array of clients from startups to Fortune 500 companies in both local and global markets. She works closely with clients on designing and implementing data privacy and security compliance programs and helps clients understand and comply with the complex patchwork of existing and emerging state, federal, and international data privacy laws and regulations. Karin regularly counsels clients on the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Virginia Consumer Data Protection Act (VCDPA), the Gramm Leach Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA). Her experience spans a range of industries including consumer goods, medical technology, financial services, e-commerce, and restaurants.

Karin also has substantial experience in drafting and negotiating commercial and technology agreements, including data licensing agreements, cloud and software-as-a-service agreements, software license agreements, professional services agreements, and website terms and conditions.