Katelyn Kekauoha Shumway

Katelyn Kekauoha Shumway works in data privacy and cybersecurity, helping businesses in technology, advertising, health care, and financial services manage compliance, draft data agreements, and respond to regulators. She also has experience supporting government initiatives around legal regulation at a state supreme court.

Katelyn drafts and negotiates technology focused agreements such as SaaS and cloud agreements, Terms of Use, Privacy Policies, and Data Processing Agreements. She advises on state and federal privacy laws, such as the California Privacy Rights Act (CPRA), California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA), and the Gramm-Leach-Bliley Act (GLBA). She assists organizations with privacy program development, data governance, cross-border data transfers, vendor management, and privacy-by-design implementation; and prepares responses to regulatory inquiries and investigations. She assists cybersecurity tabletop exercises and conducts gap assessments to identify privacy risks, then develops mitigation and implementation plans.

Concentrations

• Technology transactions