Kathryn Smith

Kathryn (“Katie”) Smith is an associate in the Intellectual Property Practice Group in the firm's Chicago office and a member of the Privacy and Cybersecurity Team. She is certified by the International Association of Privacy Professionals (IAPP) for CIPP/US.

Areas of Practice

Katie supports the privacy and data security team with a wide variety of matters. Her work includes compliance assessments, discovery efforts, and drafting and reviewing data agreements. Katie also assists with incident responses and regulatory investigations.

Articles

Privacy & Cybersecurity: Eye on Privacy Blog

• "New York AG Settles EnforcemENT Action with ENT," November 15, 2024

• "UK and US Issue Joint Statement on Children’s Privacy," November 11, 2024
• "How Legitimate Is Your Business Interest? The EDPB Has Some Thoughts," November 7, 2024

• "The Privacy and Data Security Impact of California’s Recent AI Bills," October 29, 2024

• "FTC Social Media Staff Report Suggests Enforcement Direction and Expectations," October 21, 2024

• "Promising Decision in Wiretapping Case, Win for Businesses," September 26, 2024
• "California: Age-Appropriate Design Code Act Partially Blocked, New Social Media Law Signed," September 25, 2024

• "October 1st Reminder – Big Sky Privacy Law Goes into Effect," September 23, 2024
• "New Data Breach Notification Obligations for PA – and a New Reporting Portal," September 17, 2024

• "Regulators On Both Sides of the Pond Seek Input on Children’s Privacy," September 6, 2024
• "New Hampshire AG Announces New Data Privacy Unit," August 28, 2024

• "NY AG Releases Website Privacy Guides for Businesses and Consumers," August 22, 2024
• "AI Summer Roundup: EU and Colorado Celebrate Summer with AI Legislation," August 13, 2024

• "It’s Official – BIPA’s “Per-Scan” Damages Are Out; Electronic Signatures Are In," August 12, 2024
• "Colorado’s Privacy Law Gets in on the Brain Wave Action," August 6, 2024

• "Ring, Ring, it’s the FCC Calling- TracFone to Pay $16M to Settle FCC Investigation," August 1, 2024

• "Websites Beware!: FTC Joins Other Regulators in Scrutinizing Alleged Dark Patterns," July 24, 2024
• "Indiana Amends Breach Notification Law Along with New Adult Website Verification Requirement," July 23, 2024

• "Keystone State Tweaks its Data Breach Notification Law Again," July 22, 2024

• "Rhode Island, the Ocean State, Sails the Privacy Waves," July 8, 2024

• "It’s (Almost) July 1!: Did You Remember Oregon and Texas (and Florida)’s New Privacy Laws?" June 25, 2024

• "The Land of 10,000 Lakes Adds New Consumer Privacy Law: Minnesota Joins Privacy Fray," June 10, 2024

• "Tennessee’s ELVIS Act Incorporates AI Considerations into Right of Publicity Protections," May 24, 2024

• "Maryland, the Old Line State, Creates New Lines with Consumer Privacy Law," May 20, 2024
• "May 1 Brings Another Privacy Law to the Beehive State: The Utah Motor Vehicle Data Protection Act," April 29, 2024
• "Utah’s New AI Disclosure Requirements Effective May 1," April 26, 2024
• "Nebraska Fourth State to Enact Privacy Law in 2024," April 25, 2024
• "Kentucky’s New Consumer Privacy Law: Is the Privacy Grass Greener in the Bluegrass State?" April 12, 2024
• "New Hampshire, the Granite State, Joins Privacy Law Deluge: Sets Its Law in Stone," March 27, 2024
• "DPA 101: Do You Know Where Your Data Is?" February 28, 2024
• "The Garden State Cultivates a Consumer Privacy Law – The First for 2024," January 29, 2024
• "Data Broker Rulemaking in Texas and Oregon," December 22, 2023
• "What Is the Privacy Impact of the White House AI Order for Businesses?," November 28, 2023
• "Amended Kochava Complaint Gives Insight into FTC’s View of Harm from Data Profiles," November 21, 2023
• "Massachusetts Wagers Big on Privacy in Sports Betting," November 15, 2023
• "No Need to Mind the Gap – UK Extension is a Data Bridge for US-UK Data Transfers," October 10, 2023
• "The Comprehensive Privacy Law Deluge: Impact on Loyalty Programs," October 2, 2023
• "SEC Gives Finality on Cybersecurity Disclosures for Public Companies," September 28, 2023
• "What Do the CPPA’s Draft Regulations on Risk Assessments and Cybersecurity Audits Mean for Companies?," September 14, 2023
• "The 'First State' Officially Becomes the Thirteenth State with a Comprehensive Data Privacy Law," September 13, 2023
• "The Comprehensive Privacy Law Deluge: Record-Keeping and Related Requirements," September 11, 2023
• "Texas’ SCOPE Act Puts Focus on Social Media and Minors," September 5, 2023
• "OpenAI – FTC OpensAnInvestigation," August 28, 2023
• "In 2024 Oregon Will Join Short List of States Requiring Data Broker Registration," August 16, 2023
• "Iowa Joins Growing List to Offer Potential Safe Harbor for Companies With Security Programs," August 10, 2023
• "State Comprehensive Privacy Laws – Beaver State Makes a Dozen," July 21, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Notice Obligations," July 6, 2023
• "The Comprehensive Privacy Law Deluge: Updating Vendor Contracts," June 27, 2023
• "The Comprehensive Privacy Law Deluge: What to Do About “Profiling”," June 26, 2023
• "The Lone Star State Joins the Privacy Law Deluge: Another Governor Signs," June 19, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Choice and Rights," June 14, 2023
• "NY AI Laws Going Live Next Month," Jume 14, 2024
• "Another Governor Signs: Florida Privacy Law Will be Effective July 2024," June 12, 2023
• "The Comprehensive US Privacy Law Deluge: Which US Privacy Laws Apply to Your Company?" May 30, 2023
• "Montana Governor Signs Big Sky’s Privacy Law," May 23, 2023
• "Another Governor Signs: Tennessee Volunteers to Join the Privacy Patchwork," May 15, 2023
• "Preparing for the US Comprehensive Privacy Law Deluge," May 11, 2024

• "Governor Signs: Hoosier State Adds to the US Privacy Patchwork," May 3, 2023

• "May 2nd Marks Effective Date of Pennsylvania Breach Law Amendments," May 1, 2023

• "Utah Amends Data Breach Law, Creates Cyber Center," April 21, 2023
• "The Beehive State Joins the Buzz Around Minors and Social Media," April 12, 2023

• "Colorado Privacy Law Regulations Finalized: Time to Review Information Practices," March 28, 2023
• "CPRA Update: Moving Toward Finalization," February 23, 2023
• "CNIL Weighs in On GDPR Applicability to US Company," February 7, 2023
• "Graduation Goods Settlement: A Good Reminder of AGs’ Data Security Priorities," February 1, 2023
• "EU’s Initial Response to US Proposed Data Transfers Framework," December 22, 2022
• "Pennsylvania Amends Breach Notification Law," November 29, 2022