Overview
Caitlin focuses on US-EU cross-border regulatory compliance, good governance and crisis management related to data protection and cybersecurity. The International Association of Privacy Professionals (IAPP) has designated Caitlin as a US Certified Information Privacy Professional (CIPP/US). She also has extensive experience advising clients on internal and government investigations and white collar defense.
She counsels clients on US and EU data privacy, including GDPR compliance and cross-border data transfers, as well as US federal, state and local data privacy regulations. Her practice includes advising fintech, technology and telecommunications companies and financial institutions in sensitive matters from using innovative technologies to handling regulatory inquiries and compliance, enforcement actions and litigation. She also has advised clients on developing and implementing corporate compliance programs and conducting pre and post-transaction due diligence. Caitlin regularly interacts with a variety of U.S. government agencies, including the U.S. Department of Justice (DOJ), the Securities and Exchange Commission (SEC), and the Federal Trade Commission (FTC), as well as foreign regulators. Additionally, she has significant experience advising clients in Latin America and Spain and is proficient in Spanish.
Caitlin prioritizes pro bono work and is active in the local community. As amicus curiae counsel, she has represented the American Jewish Committee (AJC) before the U.S. Supreme Court and the U.S. Courts of Appeals for the Fourth Circuit in cases involving important constitutional issues, such as the protection of religious freedom and limits on Presidential power. Caitlin was previously recognized by the Cyrus R. Vance Center for International Justice for her excellence in public service working with the non-profit, Transparency International, to combat corruption. She enjoys running and triathlons.
Caitlin is also a member of these data privacy and security organisations: IAPP – Women Leading Privacy, W@Privacy, Women in Security and Privacy.
Experience
Caitlin has represented corporate clients in a variety of significant white collar, civil and regulatory cases, including:
- A major financial institution on crisis management and global asset recovery after a cyber incident
- Multi-national companies, and their executives on matters concerning: cross-border data transfers, the CLOUD Act, the federal Computer Fraud and Abuse Act, the Defend Trade Secrets Act, the Communications Decency Act, the Consumer Fraud and Abuse Prevention Act, Gramm-Leach-Bliley Act, Health Insurance Portability and Accountability Act of 1996, CAN-SPAM and Do Not Call Act, and related state laws.
- A prominent software company in a global internal accounting fraud investigation
- A global mining company in federal securities class actions and Delaware appraisal actions following a major U.S. acquisition
- A Fortune 50 IT services company in a sensitive internal investigation and mediation of employment discrimination, breach of contract, and fraud disputes
- A Swedish company in advising on no conflicts with U.S. data protection regulations related to a cross-border transfer of personal data outside the European Union following the General Data Protection Regulations (GDPR)
Admissions