Nancy L Perkins

Nancy Perkins has a broad practice in data privacy and security, including regulatory counseling, data breach prevention and response, and transactional work, with particular focus on emerging technologies for data collection and analytics. She advises clients in the life sciences/healthcare industry on privacy compliance in areas such as clinical trials, telehealth, mobile medical applications, and artificial intelligence. She counsels financial institutions, merchants, advertisers and numerous other types of entities on online data collection, communication and transfer, as well as outreach to individuals through various media. She has extensive experience with HIPAA, the HITECH Act, Gramm-Leach-Bliley Act, Fair Credit Reporting Act, Children’s Online Privacy Protection Act, Telephone Consumer Protection Act, CAN-SPAM Act, and state privacy laws, including the CCPA/CPRA and biometric and genetic data privacy laws. In the international realm, Nancy regularly advises clients on compliance with the EU GDPR and similar laws of other jurisdictions and how to navigate legal restrictions on cross-border transfers. In the cybersecurity area, Nancy has assisted dozens of clients in handling data security breaches and regularly counsels clients on breach prevention, response planning, and the obligations of breach notifications. In mergers, acquisitions and other transactions, she handles privacy and security diligence and negotiates deal terms.