Overview
Kris is a seasoned commercial attorney who works at the intersection of data and technology for companies that embrace digital transformation, AI and innovation. He builds his practice on three key pillars: regulatory compliance, strategic transactions and the digital threat landscape.
Kris has extensive experience with U.S. and global privacy, ADMT, AI, consumer protection and cybersecurity regulatory frameworks. He supports clients with the development and implementation of enterprise-wide compliance programs and risk mitigation strategies in relation to their collection and use of data or deployment of privacy impacting technology. He counsels clients in their deployment of AI and automated decision-making tools, processing of sensitive data like biometric, precise location, and health data and their use of data for more precise targeting of customers.
Kris helps his clients drive forward a range of strategic transactions, ranging from large M&A and divestitures, to strategic partnerships, to SaaS, licensing and other commercial agreements. His contracting experience spans the areas of technology and communications law, outsourcing, interactive media, sponsorships and endorsement deals, and cutting-edge data licensing arrangements.
Kris also guides his clients as they navigate the digital threat landscape, such as the proliferation of class action litigation over common digital tracking tools, preparing for and responding to suspected data breaches, ransomware and other cybersecurity incidents and setting guardrails around the adoption of new technologies like AI agents. He works with clients along every step of the journey, beginning with identifying commercially practical risk-mitigation strategies and building cyber preparedness. Clients also bring in Kris to assist after things have gone wrong, supporting them in defending against privacy-related lawsuits or guiding them through the investigation and remediation efforts following a cyber incident.
Experience
- A large telecom infrastructure provider: advising on a 50-state data breach involving sensitive employee data.
- A financial services company: counseling on consent requirements for SMS/text message marketing, email marketing, and telephone marketing campaigns related to current and prospective clients.
- An advertising platform: advising in responding to alleged non-compliance with the CCPA.
- A mass media corporation: advising in its diligence and acquisition of several audio technology companies.
- A multinational consumer goods company: advising in developing a U.S. privacy compliance program for its affiliates and subsidiaries.
- A commercial real estate company: advising in the investigation and response to a multi-jurisdiction data breach involving ransomware.
- A range of U.S. and international companies: advising in developing internal protocols and external policies to comply with the California Consumer Privacy Act and similar comprehensive state privacy laws in Colorado, Connecticut, Utah, and Virginia.
- A media and entertainment company: advising in its efforts to comply with state auto-renewal laws.