Kathryn Smith

Kathryn (“Katie”) Smith is an associate in the Intellectual Property Practice Group in the firm's Chicago office and a member of the Privacy and Cybersecurity Team. She is certified by the International Association of Privacy Professionals (IAPP) for CIPP/US.

Areas of Practice

Katie supports the privacy and data security team with a wide variety of matters. Her work includes compliance assessments, discovery efforts, and drafting and reviewing data agreements. Katie also assists with incident responses and regulatory investigations.

Honors

Top Author, JD Supra Readers' Choice Awards, 2025

Articles

Privacy & Cybersecurity: Eye on Privacy Blog

• "FTC COPPA Updates Provide New Protections for Children," February 26, 2025

• "Oregon’s AI Guidance: Old Laws in Scope for New AI," February 25, 2025

• "New Jersey Updates Discrimination Law: New Rules for AI Fairness," February 20, 2025
• "New Year, Old Tradition: CPPA Focuses on Unregistered Data Brokers," February 18, 2025

• "Don’t Forget the EU: Italy Issued First GenAI Fine of €15 Million Alleging GDPR Violations," January 28, 2025

• "Colorado Rolls Out Updated Privacy Rules Ahead of 2025 CPA Amendments," January 7, 2025

• "New Year, New Protections for New York Artists and AI-Generated Replicas," January 6, 2025
• "New York Modifies Data Breach Law Heading Into 2025," January 3, 2025

• "FTC Keeps Sights on Data Brokers that Sell Sensitive Location Sites," December 20, 2024

• "FCC’s One-To-One Consent Rule Takes Effect in January," December 19, 2024
• "Coming to a State Near You: 5 State Privacy Laws Take Effect in January 2025," December 18, 2024

• "‘All Hands on Deck’ – White House Continues to Call on Agencies for AI National Security Plan," December 16, 2024
• "California’s Privacy Regulator Had a Busy November, Data Broker Edition: What Does It Mean for Businesses?," December 13, 2024

• "California’s Privacy Regulator Had a Busy November, Cybersecurity Audits and Insurance Edition: What Does It Mean for Businesses?," December 12, 2024
• "California’s Privacy Regulator Had a Busy November, Risk Assessment Edition: What Does It Mean for Businesses?," December 11, 2024

• "California’s Privacy Regulator Had a Busy November, Automated Decisionmaking Edition: What Does It Mean for Businesses?," December 10, 2024
• "California’s Privacy Regulator Had a Busy November: What Does It Mean for Businesses?," December 9, 2024

• "Click! FTC Updates Its Negative Option Rule," November 19, 2024
• "New York AG Settles EnforcemENT Action with ENT," November 15, 2024

• "UK and US Issue Joint Statement on Children’s Privacy," November 11, 2024
• "How Legitimate Is Your Business Interest? The EDPB Has Some Thoughts," November 7, 2024

• "The Privacy and Data Security Impact of California’s Recent AI Bills," October 29, 2024

• "FTC Social Media Staff Report Suggests Enforcement Direction and Expectations," October 21, 2024

• "Promising Decision in Wiretapping Case, Win for Businesses," September 26, 2024
• "California: Age-Appropriate Design Code Act Partially Blocked, New Social Media Law Signed," September 25, 2024

• "October 1st Reminder – Big Sky Privacy Law Goes into Effect," September 23, 2024
• "New Data Breach Notification Obligations for PA – and a New Reporting Portal," September 17, 2024

• "Regulators On Both Sides of the Pond Seek Input on Children’s Privacy," September 6, 2024
• "New Hampshire AG Announces New Data Privacy Unit," August 28, 2024

• "NY AG Releases Website Privacy Guides for Businesses and Consumers," August 22, 2024
• "AI Summer Roundup: EU and Colorado Celebrate Summer with AI Legislation," August 13, 2024

• "It’s Official – BIPA’s “Per-Scan” Damages Are Out; Electronic Signatures Are In," August 12, 2024
• "Colorado’s Privacy Law Gets in on the Brain Wave Action," August 6, 2024

• "Ring, Ring, it’s the FCC Calling- TracFone to Pay $16M to Settle FCC Investigation," August 1, 2024

• "Websites Beware!: FTC Joins Other Regulators in Scrutinizing Alleged Dark Patterns," July 24, 2024
• "Indiana Amends Breach Notification Law Along with New Adult Website Verification Requirement," July 23, 2024

• "Keystone State Tweaks its Data Breach Notification Law Again," July 22, 2024

• "Rhode Island, the Ocean State, Sails the Privacy Waves," July 8, 2024

• "It’s (Almost) July 1!: Did You Remember Oregon and Texas (and Florida)’s New Privacy Laws?" June 25, 2024

• "The Land of 10,000 Lakes Adds New Consumer Privacy Law: Minnesota Joins Privacy Fray," June 10, 2024

• "Tennessee’s ELVIS Act Incorporates AI Considerations into Right of Publicity Protections," May 24, 2024

• "Maryland, the Old Line State, Creates New Lines with Consumer Privacy Law," May 20, 2024
• "May 1 Brings Another Privacy Law to the Beehive State: The Utah Motor Vehicle Data Protection Act," April 29, 2024
• "Utah’s New AI Disclosure Requirements Effective May 1," April 26, 2024
• "Nebraska Fourth State to Enact Privacy Law in 2024," April 25, 2024
• "Kentucky’s New Consumer Privacy Law: Is the Privacy Grass Greener in the Bluegrass State?" April 12, 2024
• "New Hampshire, the Granite State, Joins Privacy Law Deluge: Sets Its Law in Stone," March 27, 2024
• "DPA 101: Do You Know Where Your Data Is?" February 28, 2024
• "The Garden State Cultivates a Consumer Privacy Law – The First for 2024," January 29, 2024
• "Data Broker Rulemaking in Texas and Oregon," December 22, 2023
• "What Is the Privacy Impact of the White House AI Order for Businesses?," November 28, 2023
• "Amended Kochava Complaint Gives Insight into FTC’s View of Harm from Data Profiles," November 21, 2023
• "Massachusetts Wagers Big on Privacy in Sports Betting," November 15, 2023
• "No Need to Mind the Gap – UK Extension is a Data Bridge for US-UK Data Transfers," October 10, 2023
• "The Comprehensive Privacy Law Deluge: Impact on Loyalty Programs," October 2, 2023
• "SEC Gives Finality on Cybersecurity Disclosures for Public Companies," September 28, 2023
• "What Do the CPPA’s Draft Regulations on Risk Assessments and Cybersecurity Audits Mean for Companies?," September 14, 2023
• "The 'First State' Officially Becomes the Thirteenth State with a Comprehensive Data Privacy Law," September 13, 2023
• "The Comprehensive Privacy Law Deluge: Record-Keeping and Related Requirements," September 11, 2023
• "Texas’ SCOPE Act Puts Focus on Social Media and Minors," September 5, 2023
• "OpenAI – FTC OpensAnInvestigation," August 28, 2023
• "In 2024 Oregon Will Join Short List of States Requiring Data Broker Registration," August 16, 2023
• "Iowa Joins Growing List to Offer Potential Safe Harbor for Companies With Security Programs," August 10, 2023
• "State Comprehensive Privacy Laws – Beaver State Makes a Dozen," July 21, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Notice Obligations," July 6, 2023
• "The Comprehensive Privacy Law Deluge: Updating Vendor Contracts," June 27, 2023
• "The Comprehensive Privacy Law Deluge: What to Do About “Profiling”," June 26, 2023
• "The Lone Star State Joins the Privacy Law Deluge: Another Governor Signs," June 19, 2023
• "The Comprehensive Privacy Law Deluge: Approaching Choice and Rights," June 14, 2023
• "NY AI Laws Going Live Next Month," Jume 14, 2024
• "Another Governor Signs: Florida Privacy Law Will be Effective July 2024," June 12, 2023
• "The Comprehensive US Privacy Law Deluge: Which US Privacy Laws Apply to Your Company?" May 30, 2023
• "Montana Governor Signs Big Sky’s Privacy Law," May 23, 2023
• "Another Governor Signs: Tennessee Volunteers to Join the Privacy Patchwork," May 15, 2023
• "Preparing for the US Comprehensive Privacy Law Deluge," May 11, 2024

• "Governor Signs: Hoosier State Adds to the US Privacy Patchwork," May 3, 2023

• "May 2nd Marks Effective Date of Pennsylvania Breach Law Amendments," May 1, 2023

• "Utah Amends Data Breach Law, Creates Cyber Center," April 21, 2023
• "The Beehive State Joins the Buzz Around Minors and Social Media," April 12, 2023

• "Colorado Privacy Law Regulations Finalized: Time to Review Information Practices," March 28, 2023
• "CPRA Update: Moving Toward Finalization," February 23, 2023
• "CNIL Weighs in On GDPR Applicability to US Company," February 7, 2023
• "Graduation Goods Settlement: A Good Reminder of AGs’ Data Security Priorities," February 1, 2023
• "EU’s Initial Response to US Proposed Data Transfers Framework," December 22, 2022
• "Pennsylvania Amends Breach Notification Law," November 29, 2022