Brittany is co-head of the firm's Technology Industry Group. She is a partner in the firm's top-ranked global data, cyber & privacy practice and advises clients in identifying, evaluating and managing complex global privacy and information security risks and compliance issues. Brittany is ranked in Chambers USA, Chambers Global and Legal 500, and was named a New York Law Journal "Rising Star," a Law360 "Rising Star" in privacy and cybersecurity, and one of Global Data Review's 40 Under 40 data lawyers. Chambers USA quotes clients who call her "very diligent, intelligent and hard-working" and "very client-focused, attentive and responsive." Chambers USA also quotes a client who calls her "one of the very best individuals I have worked with on privacy-related matters." Legal 500 refers to Brittany as "the best at what she does," recommending her for cyber law (including data privacy and data protection) and fintech.Brittany assists clients in identifying, evaluating and managing a panoply of global privacy and information security risks and compliance issues. A significant aspect of her practice is advising large, multi-national companies on catastrophic cybersecurity incidents. Brittany served as a lead attorney on the two largest reported breaches in history (affecting over three billion user accounts) and has managed hundreds more. Her cybersecurity practice includes advising clients on data breach notification responsibilities; counseling them on responding to multi-jurisdictional regulatory investigations; and providing strategic advice in the breach context for managing ransomware attacks, as well as inquiries from Boards of Directors, consumers, media and potential acquiring companies in a deal setting. Brittany also helps companies design and build privacy and data security governance programs and conduct proactive breach preparedness activities, including developing workable incident response plans and legal breach notification procedures, ransomware playbooks and legal primers, running executive-level tabletops with data breach hypotheticals, and engaging third-party experts (such as forensic investigation firms, ransomware specialists, credit monitoring services, PR firms and call centers) in advance of an incident.In relation to her privacy compliance practice, Brittany advises clients on the California Consumer Privacy Act of 2018, GLB, CAN-SPAM, and other U.S. state and federal privacy requirements, and global data protection laws (including those in the EU, Asia and Latin America). She routinely conducts privacy impact assessments and advises companies on managing risk in connection with extensive and innovative data collection and use, including with AI and machine learning technologies. She also regularly negotiates privacy and data security provisions of complex commercial and technology-related contracts and helps companies design robust vendor management programs.

Bar Admissions
New York

Education
JD, Washington University in St. Louis School of Law, 2009

BA, University of Notre Dame, cum laude, 2006

Board Oversight of Privacy and Cybersecurity Risk: Why Delaware Developments Matter, The Computer & Internet Lawyer

California Consumer Privacy Act and Its Impact on M&A Transactions, Deal Lawyers

California Consumer Privacy Act and Its Impact, Los Angeles Business Journal

California Consumer Privacy Act: A Sea of Change for Retailers, Chain Store Age

Cybersecurity Risks and Readiness for the Hotel Industry, GMBHA Allied Upgrade eNewsletter

Drilling Down on Cybersecurity

New York - Cybersecurity

Ransomware Attacks Raise Key Legal Considerations, Law360

SEC Fines Broker-Dealer $1 Million in First Enforcement Action Under Identity Theft Rule, SA Financial Regulation Online Journal

The EU AI Act: Guide for In-House Lawyers

Training a Machine Learning Model Using Customer Proprietary Data: Navigating Key IP and Data Protection Considerations, Pratt's Privacy & Cybersecurity Law Report

USA: Discrimination in a hightech world-potential pitfalls of AI in employment