Privacy Shield – A “How-to” Guide on Navigating its Process, Risks and Opportunities

Mark E. Schreiber focuses his practice on cybersecurity, data breach response, Payment Card Industry (PCI), global privacy coordination, and AI governance. He advises entities facing cross-border data protection, the General Data Protection Regulation (GDPR), privacy frameworks, strategic decisions, cyber assessments and investigations. Mark has led numerous multinational and cross-border matters and internal investigations, including those involving data breaches, data transfer and credit card/PCI matters. He has advised senior management, boards, and special board committees on a variety of investigations, including data breach prevention and response.

Mark has spoken around the world on topics related to data breaches and related defense litigation strategy, overlapping international data protection compliance, and other privacy topics. He has also given cyber, privacy, and AI presentations to delegations from some 80 countries during numerous State Department sponsored international visits. He helped found and was chair for over a decade of the Privacy and Data Protection Group of the World Law Group, an international affiliation of large law firms in some 65 countries, and received the “2012 World Law Group Practice/Industry Group Leader of the Year Award” in recognition of his privacy and data protection work, including managing two global data protection publications. In addition, Mark helped found and was co-chair of the Boston Bar Association’s Privacy Law Committee. He is also a Certified Information Privacy Professional (CIPP/US) and has given a variety of presentations for the International Association of Privacy Professionals (IAPP).

Mark has also practiced, written and lectured widely on topics related to employment law, including presentations to the Flaschner Judicial Institute for judges. Prior to entering private practice, he was the chief trial lawyer for the Massachusetts Commission Against Discrimination (MCAD).

Amy C. Pimentel (CIPM) advises clients on global data protection, privacy and cybersecurity. She is skilled at harmonizing requirements across jurisdictions and legal regimes to build practical and business-focused global privacy and cybersecurity programs. She also helps multinational companies understand privacy rules and balance their legal risk when entering new markets or breaking into new or non-traditional industries.

Amy provides day-to-day product counseling and advises on data strategies. She works with clients across industries – spanning the health care/life sciences industries to big tech, finance, media and consumer products – to help them leverage and transfer data in a compliant way. She also partners with multi-disciplinary teams to advise on product development, digital advertising, artificial intelligence/machine learning and other emerging technologies to incorporate privacy-by-design and security-by-design principles. Her pragmatic approaches to managing data enable clients to achieve their business objectives while remaining compliant with their dynamic regulatory environment.

In addition to regulatory and product counseling, Amy also drafts and negotiates complex data arrangements and manages privacy and cyber risks in corporate transactions and outsourcing. She advises clients on effective due diligence strategies when vetting risks of purchasing and disclosing data and regularly partners with transaction co-counsel to evaluate the regulatory impact of specific privacy and cybersecurity matters, including government investigations and security breaches. She also companies on their legal obligations with respect to supply chain management and third-party risk management.