Kathryn Smith

Kathryn (“Katie”) Smith is a Cybersecurity and Privacy Fellow in the firm's Chicago office and a member of the Privacy and Cybersecurity Team. She is certified by the International Association of Privacy Professionals (IAPP) for CIPP/US.

Areas of Practice

Katie supports the privacy and data security team with a wide variety of matters. Her work includes compliance assessments, discovery efforts, and drafting and reviewing data agreements. Katie also assists with incident responses and regulatory investigations.

Articles

Privacy & Cybersecurity: Eye on Privacy Blog

• "Maryland, the Old Line State, Creates New Lines with Consumer Privacy Law," May 20, 2024
• "May 1 Brings Another Privacy Law to the Beehive State: The Utah Motor Vehicle Data Protection Act," April 29, 2024
• "Utah’s New AI Disclosure Requirements Effective May 1," April 26, 2024
• "Nebraska Fourth State to Enact Privacy Law in 2024," April 25, 2024
• "Kentucky’s New Consumer Privacy Law: Is the Privacy Grass Greener in the Bluegrass State?" April 12, 2024
• "New Hampshire, the Granite State, Joins Privacy Law Deluge: Sets Its Law in Stone," March 27, 2024
• "DPA 101: Do You Know Where Your Data Is?" February 28, 2024
• "The Garden State Cultivates a Consumer Privacy Law – The First for 2024," January 29, 2024
• "Data Broker Rulemaking in Texas and Oregon," December 22, 2023
• "What Is the Privacy Impact of the White House AI Order for Businesses?," November 28, 2023
• "Amended Kochava Complaint Gives Insight into FTC’s View of Harm from Data Profiles," November 21, 2023
• "Massachusetts Wagers Big on Privacy in Sports Betting," November 15, 2023
• "No Need to Mind the Gap – UK Extension is a Data Bridge for US-UK Data Transfers," October 10, 2023
• "The Comprehensive Privacy Law Deluge: Impact on Loyalty Programs," October 2, 2023
• "SEC Gives Finality on Cybersecurity Disclosures for Public Companies," September 28, 2023
• "What Do the CPPA’s Draft Regulations on Risk Assessments and Cybersecurity Audits Mean for Companies?," September 14, 2023
• "The 'First State' Officially Becomes the Thirteenth State with a Comprehensive Data Privacy Law," September 13, 2023
• "The Comprehensive Privacy Law Deluge: Record-Keeping and Related Requirements," September 11, 2023
• "Texas’ SCOPE Act Puts Focus on Social Media and Minors," September 5, 2023
• "OpenAI – FTC OpensAnInvestigation," August 28, 2023
• "In 2024 Oregon Will Join Short List of States Requiring Data Broker Registration," August 16, 2023
• "Iowa Joins Growing List to Offer Potential Safe Harbor for Companies With Security Programs," August 10, 2023
• "State Comprehensive Privacy Laws – Beaver State Makes a Dozen," July 21, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Notice Obligations," July 6, 2023
• "The Comprehensive Privacy Law Deluge: Updating Vendor Contracts," June 27, 2023
• "The Comprehensive Privacy Law Deluge: What to Do About “Profiling”," June 26, 2023
• "The Lone Star State Joins the Privacy Law Deluge: Another Governor Signs," June 19, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Choice and Rights," June 14, 2023
• "NY AI Laws Going Live Next Month," Jume 14, 2024
• "Another Governor Signs: Florida Privacy Law Will be Effective July 2024," June 12, 2023
• "The Comprehensive US Privacy Law Deluge: Which US Privacy Laws Apply to Your Company?" May 30, 2023
• "Montana Governor Signs Big Sky’s Privacy Law," May 23, 2023
• "Another Governor Signs: Tennessee Volunteers to Join the Privacy Patchwork," May 15, 2023
• "Preparing for the US Comprehensive Privacy Law Deluge," May 11, 2024

• "Governor Signs: Hoosier State Adds to the US Privacy Patchwork," May 3, 2023

• "May 2nd Marks Effective Date of Pennsylvania Breach Law Amendments," May 1, 2023

• "Utah Amends Data Breach Law, Creates Cyber Center," April 21, 2023
• "The Beehive State Joins the Buzz Around Minors and Social Media," April 12, 2023

• "Colorado Privacy Law Regulations Finalized: Time to Review Information Practices," March 28, 2023
• "CPRA Update: Moving Toward Finalization," February 23, 2023
• "CNIL Weighs in On GDPR Applicability to US Company," February 7, 2023
• "Graduation Goods Settlement: A Good Reminder of AGs’ Data Security Priorities," February 1, 2023
• "EU’s Initial Response to US Proposed Data Transfers Framework," December 22, 2022
• "Pennsylvania Amends Breach Notification Law," November 29, 2022