Heidi Saas

About

💃 MY POSTS ARE MY OPINIONS, NOT LEGAL ADVICE. Practice Areas: Data Privacy and Technology, Privacy & Consumer Protection Strategy, AI Consulting, Outside GC/CPO. I regularly advise businesses working in a wide variety of industries, on data privacy, consumer protection, and AI compliance strategies. #lawyermarketing #lawyeradvertisement ✅ Speaking topics: Data Rights, and enforcement trends. Consumer protection, publicity, and privacy rights. AI in HR, and how to identify and mitigate risk by auditing and remediating AI tools. The DOJ Data Broker Rule (“DOJ Rule”) Protecting American Data from Foreign Adversaries (“PADFAA”) regulations. Work: Regulatory Compliance Privacy and AI SME advising businesses on policy and political landscape strategies for risk management; Conducted Privacy Impact Assessments PIAs/DPIAs and Privacy Threshold Assessments (PTAs), including with multi-stakeholder teams working across UK, EU, AUS, and US jurisdictional requirements for Privacy and Data Protection; Conducted Comprehensive Privacy Program Gap Assessments and advised businesses on risk management throughout the data lifecycle; Drafted and implemented privacy engineering strategies for full tech stacks to accomplish optimal results while also satisfying data privacy and cybersecurity compliance objectives; Reviewed Master Service Agreements and worked with multi-stakeholder teams to resolve issues by incorporating mutual feedback and finalizing deals; Reviewed Generative AI Technology Agreements and advised businesses on implementing safety “guardrails” for data protection, and implemented federated learning and Retrieval- Augmented Generation (RAG) configurations to protect Intellectual Property; Advised businesses on adtech and programmatic risks and mitigations for marketing campaigns, monitored and advised businesses on proposed adtech legislation and regulations; Negotiated Contracts with IT and security teams and advised businesses on cybersecurity controls NIST and/or ISO implementation obligations, specifically in cloud environments; Created and Conducted Privacy, Data Governance, Risk Management, Gen AI Red Team- ing, Best Practices, and Incident Trainings for businesses; Continuous monitoring of developments with the GDPR, CCPA/CPRA and US states’ privacy laws, COPPA, FERPA, HIPPA, FCRA, BIPA, NY/DFS regulations, FTC regulations, CFPB regulations, and new AI/privacy legislation trends; CIPP/US and IAPP member from . Logical AI certified AI Governance Architect 2024-Present. 👁Companies need data, consumers want privacy, I can help.