If your company sells to customers in more than one state, and most SaaS companies do, you’re likely already subject to more than one state’s privacy law, regardless of where you’re headquartered. I help technology companies map what personal data they actually collect, close the gap between their DPA and privacy policy and their real data practices, and build a lightweight process for tracking new obligations as their customer base grows.

What This Covers?

• Data Processing Agreements (“DPA”)
• Privacy policy review and drafting
• Subprocessor review and management
• Vendor privacy risk review
• Corporate compliance program guidance

Why Work With Me?

I have been working with companies on data privacy since before the EU’s General Data Protection Regulation (“GDPR”) became a thing (2018 by the way), and through the birth of the California Consumer Privacy Act (“CCPA”) (2020 by the way). The data privacy law landscape is a convoluted hodge-podge of potentially applicable laws, that isn’t getting any clearer any time soon. By mid-2026 there were approximately 20 states with some form of data privacy law in effect. I can help you navigate this area from the perspective of an attorney who has been navigating it for years.