GDPR: Where are we now?

Mark E. Schreiber focuses his practice on cybersecurity, data breach response, Payment Card Industry (PCI), global privacy coordination, and AI governance. He advises entities facing cross-border data protection, the General Data Protection Regulation (GDPR), privacy frameworks, strategic decisions, cyber assessments and investigations. Mark has led numerous multinational and cross-border matters and internal investigations, including those involving data breaches, data transfer and credit card/PCI matters. He has advised senior management, boards, and special board committees on a variety of investigations, including data breach prevention and response.

Mark has spoken around the world on topics related to data breaches and related defense litigation strategy, overlapping international data protection compliance, and other privacy topics. He has also given cyber, privacy, and AI presentations to delegations from some 80 countries during numerous State Department sponsored international visits. He helped found and was chair for over a decade of the Privacy and Data Protection Group of the World Law Group, an international affiliation of large law firms in some 65 countries, and received the “2012 World Law Group Practice/Industry Group Leader of the Year Award” in recognition of his privacy and data protection work, including managing two global data protection publications. In addition, Mark helped found and was co-chair of the Boston Bar Association’s Privacy Law Committee. He is also a Certified Information Privacy Professional (CIPP/US) and has given a variety of presentations for the International Association of Privacy Professionals (IAPP).

Mark has also practiced, written and lectured widely on topics related to employment law, including presentations to the Flaschner Judicial Institute for judges. Prior to entering private practice, he was the chief trial lawyer for the Massachusetts Commission Against Discrimination (MCAD).

Amy C. Pimentel (CIPM) advises clients on the legal, regulatory, and governance challenges that arise at the intersection of privacy, cybersecurity, and technology. She helps organizations navigate evolving global requirements while developing practical strategies that enable innovation, manage risk, and support business growth. Amy is particularly skilled at translating complex legal and regulatory frameworks into operational solutions that work across jurisdictions, products, and business functions.

Amy serves as a strategic advisor to companies developing, deploying, and scaling technology-driven products and services. She counsels clients on artificial intelligence (AI) governance, data strategy, privacy compliance, cybersecurity, and digital product development, helping them harness emerging technologies responsibly and effectively. Working across industries — including health care and life sciences, technology, financial services, media/social media, and consumer products — Amy partners with legal, product, engineering, and executive teams to embed privacy, security, and responsible AI principles throughout the product lifecycle. Her practical, business-focused approach helps clients bring innovative products to market while navigating an increasingly complex regulatory environment.

In addition to regulatory and product counseling, Amy advises on technology, data, and cybersecurity issues in commercial transactions, outsourcing arrangements, strategic partnerships, and corporate transactions. She drafts and negotiates complex technology and data agreements, conducts privacy and cyber due diligence, and counsels clients on third-party risk management, data commercialization, security incidents, and regulatory investigations. By combining deep regulatory knowledge with a strong understanding of emerging technologies, Amy helps clients address today's challenges while preparing for the risks and opportunities of tomorrow.