McDermott Will & Schulte, a global law firm

Amy C. Pimentel (CIPM) advises clients on global data protection, privacy and cybersecurity. She is skilled at harmonizing requirements across jurisdictions and legal regimes to build practical and business-focused global privacy and cybersecurity programs. She also helps multinational companies understand privacy rules and balance their legal risk when entering new markets or breaking into new or non-traditional industries.

Amy provides day-to-day product counseling and advises on data strategies. She works with clients across industries – spanning the health care/life sciences industries to big tech, finance, media and consumer products – to help them leverage and transfer data in a compliant way. She also partners with multi-disciplinary teams to advise on product development, digital advertising, artificial intelligence/machine learning and other emerging technologies to incorporate privacy-by-design and security-by-design principles. Her pragmatic approaches to managing data enable clients to achieve their business objectives while remaining compliant with their dynamic regulatory environment.

In addition to regulatory and product counseling, Amy also drafts and negotiates complex data arrangements and manages privacy and cyber risks in corporate transactions and outsourcing. She advises clients on effective due diligence strategies when vetting risks of purchasing and disclosing data and regularly partners with transaction co-counsel to evaluate the regulatory impact of specific privacy and cybersecurity matters, including government investigations and security breaches. She also companies on their legal obligations with respect to supply chain management and third-party risk management.

Elliot Golding (CIPP/US) has spent nearly 20 years providing privacy and cyber advice to hundreds of clients spanning virtually every sector of the economy, with a particular focus on working with technology, healthcare, life sciences, financial and insurance, automotive, e-commerce, advertising technology, and telecommunication companies. He provides uniquely practical, risk-based, industry-benchmarked, and actionable advice to enable businesses to maximize data, support business needs while managing risk, and “get to yes” as an extension of his clients’ internal teams.

Elliot is a leading industry practitioner with deep technical experience in cutting-edge topics including advertising and cookies and online tracking technologies, data monetization strategies, digital health tools, and artificial intelligence (AI). He also has deep technical and operational experience – including a two-year Chief Privacy Officer secondment to a large health insurance company – designing and technically implementing global privacy programs that harmonize US state laws (like the California Consumer Privacy Act, Washington My Health My Data, and equivalent laws in over 20 states); health and financial-specific laws such as the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), and insurance rules; marketing rules such as the Telephone Consumer Protection Act and CAN-SPAM Act; and global laws such as the General Data Protection Regulation (GDPR). Elliot has also managed hundreds of breaches and ransomware attacks, guiding clients through all aspects of investigation, notification, remediation, and engagement with regulators.

Recognized in many industry rankings and awards, Elliot has been featured in Chambers USA, Legal 500 US, Bloomberg Law, Global Data Review, and the National Law Journal. Elliot also chairs the American Bar Association’s E-Privacy Committee.