McDermott Will & Schulte, a global law firm

Elliot Golding (CIPP/US) has spent nearly 20 years providing privacy and cyber advice to hundreds of clients spanning virtually every sector of the economy, with a particular focus on working with technology, healthcare, life sciences, financial and insurance, automotive, e-commerce, advertising technology, and telecommunication companies. He provides uniquely practical, risk-based, industry-benchmarked, and actionable advice to enable businesses to maximize data, support business needs while managing risk, and “get to yes” as an extension of his clients’ internal teams.

Elliot is a leading industry practitioner with deep technical experience in cutting-edge topics including advertising and cookies and online tracking technologies, data monetization strategies, digital health tools, and artificial intelligence (AI). He also has deep technical and operational experience – including a two-year Chief Privacy Officer secondment to a large health insurance company – designing and technically implementing global privacy programs that harmonize US state laws (like the California Consumer Privacy Act, Washington My Health My Data, and equivalent laws in over 20 states); health and financial-specific laws such as the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), and insurance rules; marketing rules such as the Telephone Consumer Protection Act and CAN-SPAM Act; and global laws such as the General Data Protection Regulation (GDPR). Elliot has also managed hundreds of breaches and ransomware attacks, guiding clients through all aspects of investigation, notification, remediation, and engagement with regulators.

Recognized in many industry rankings and awards, Elliot has been featured in Chambers USA, Legal 500 US, Bloomberg Law, Global Data Review, and the National Law Journal. Elliot also chairs the American Bar Association’s E-Privacy Committee.

Kathryn Linsky, CIPP/US, is an experienced privacy, data protection and cybersecurity lawyer counseling on data protection practices throughout the information lifecycle, including compliance with national and international regulations and data processing in emerging technologies.

Kathryn works directly with legal and business stakeholders to advise clients on product and feature development, with a focus on privacy by design. Kathryn is solutions-oriented and skilled in providing practical, business-facing advice, taking into account the particulars of each client’s industry and risk tolerance.

Kathryn represents clients on the full spectrum of privacy, cybersecurity and information management issues in the context of governance and compliance, business strategy, transactions, mergers and acquisitions, incident preparedness and response, and legislative and regulatory strategy.

Prior to joining the firm, Kathryn was an in-house senior privacy counsel at an American multinational technology company that specializes in consumer electronics, software and online services. In this role she managed a team that covered Artificial Intelligence/Machine Learning and software engineering.

Amy C. Pimentel (CIPM) advises clients on global data protection, privacy and cybersecurity. She is skilled at harmonizing requirements across jurisdictions and legal regimes to build practical and business-focused global privacy and cybersecurity programs. She also helps multinational companies understand privacy rules and balance their legal risk when entering new markets or breaking into new or non-traditional industries.

Amy provides day-to-day product counseling and advises on data strategies. She works with clients across industries – spanning the health care/life sciences industries to big tech, finance, media and consumer products – to help them leverage and transfer data in a compliant way. She also partners with multi-disciplinary teams to advise on product development, digital advertising, artificial intelligence/machine learning and other emerging technologies to incorporate privacy-by-design and security-by-design principles. Her pragmatic approaches to managing data enable clients to achieve their business objectives while remaining compliant with their dynamic regulatory environment.

In addition to regulatory and product counseling, Amy also drafts and negotiates complex data arrangements and manages privacy and cyber risks in corporate transactions and outsourcing. She advises clients on effective due diligence strategies when vetting risks of purchasing and disclosing data and regularly partners with transaction co-counsel to evaluate the regulatory impact of specific privacy and cybersecurity matters, including government investigations and security breaches. She also companies on their legal obligations with respect to supply chain management and third-party risk management.

David P. Saunders (CIPP/US, CIPM) is an experienced litigator who focuses his practice on privacy and cybersecurity matters. David helps clients through the life cycle of their data privacy needs. He helps them mitigate and manage risks related to data privacy and cybersecurity by assisting their government affairs teams with the development of new privacy legislation, their legal and compliance teams through the implementation of privacy programs, and their litigation teams through regulatory investigations and civil class action litigations.

David has represented dozens of companies across industries in connection with civil litigation and pre-suit demands related to a wide-array of privacy-related litigation. Whether related to website tracking technologies, fallout from a data breach, biometric data collection, or claims of unfair and deceptive trade practices, David has experience successfully resolving litigation matters for clients.

David has worked with a number of state attorney general’s offices and federal regulators, and advocated on behalf of clients in the AdTech, telecommunications, healthcare, and financial services sectors in response to routine inquiries as well as civil investigations. His work also includes collaborating with clients to provide testimony and comment on existing and planned data privacy legislation and regulation at the state and federal levels.

David has experience in all aspects of privacy program implementation, from conducting risk assessments and drafting privacy policies to planning around cross-border data transfers and negotiating vendor agreements. He regularly counsels on GDPR, GLBA, CCPA, CAN-SPAM, and the growing list of state privacy laws and regulations. David also regularly performs due diligence for corporate transactions.

David maintains an active pro bono practice, having represented inmates in various actions in state and federal courts, and providing privacy program development, counseling, and training to nonprofits.