McDermott Will & Schulte, a global law firm

Co-Head of Investment Management Regulatory and Enforcement. Advises private funds on regulatory and compliance matters, particularly the Investment Advisers Act of 1940.

Kelly supports clients undergoing SEC examinations, including by handling deficiency letters and enforcement referrals and uses that experience to assist clients with exam preparedness.

She practices in the intersection of regulation and emerging technologies, including artificial intelligence, alternative data, web scraping and electronic communications.

Kelly also advises clients on data privacy and cybersecurity.

She regularly conducts client training sessions and is a sought-after presenter at leading industry conferences.

Kathryn Linsky, CIPP/US, is an experienced privacy, data protection and cybersecurity lawyer counseling on data protection practices throughout the information lifecycle, including compliance with national and international regulations and data processing in emerging technologies.

Kathryn works directly with legal and business stakeholders to advise clients on product and feature development, with a focus on privacy by design. Kathryn is solutions-oriented and skilled in providing practical, business-facing advice, taking into account the particulars of each client’s industry and risk tolerance.

Kathryn represents clients on the full spectrum of privacy, cybersecurity and information management issues in the context of governance and compliance, business strategy, transactions, mergers and acquisitions, incident preparedness and response, and legislative and regulatory strategy.

Prior to joining the firm, Kathryn was an in-house senior privacy counsel at an American multinational technology company that specializes in consumer electronics, software and online services. In this role she managed a team that covered Artificial Intelligence/Machine Learning and software engineering.

Stephen Reynolds (CIPP/US, CISSP) advises some of the largest companies in the world on complex data security and privacy matters.

A former computer programmer and IT analyst, Stephen is uniquely able to use his computer background to the advantage of his clients in matters involving data security, privacy, artificial intelligence and computer forensic investigations. He assists with responding to cybersecurity incidents, such as ransomware attacks, fund transfer fraud, data breaches and business email compromise matters. This work includes helping companies comply with regulatory obligations in the event of these incidents—including Securities and Exchange Commission (SEC) filings for publicly traded companies. Having litigated data security and privacy cases from the trial court level and through the highest levels of appeals, Stephen also represents clients in litigation and regulatory investigations regarding data security, privacy and technology matters.

Stephen has advised multiple publicly traded companies, including technology companies, professional services firms and consumer facing organizations, on compliance with the SEC’s recently adopted requirements for disclosing cybersecurity incidents, risk management and governance within 10-K annual reports. This guidance has included helping clients draft language for SEC reporting obligations and craft internal policies related to SEC disclosure obligations. Additionally, Stephen has helped clients with evaluating the potential need for and in making disclosures of material cybersecurity incidents on Form 8-Ks.

Stephen frequently educates others on data security and privacy at industry conferences and other forums. He is on the board of the International Association of Privacy Professionals (IAPP) and an instructor of the IAPP’s CIPP/US certification. In addition, Stephen is an instructor for the CISSP certification through the ISC(2). He also lectures on Data Security and Privacy Law at Indiana University Robert H. McKinney School of Law.

Counsels private funds on compliance with the Investment Advisers Act of 1940, other state and federal requirements and interfacing with regulators.

Tarik’s experience includes advising clients on establishing compliance policies and procedures, registering with the SEC and handling SEC examinations.

Before joining Schulte, he worked at the SEC, most recently in the Private Funds Unit of the Office of Compliance Inspections and Examinations, where he focused on regulatory examinations of advisers to hedge funds and private equity funds.

Tarik also worked in the SEC’s New York Regional Office, where he conducted regulatory examinations of registered investment advisers and registered investment companies.