Chris Taylor - Attorney | Privacy, Cybersecurity, Technology Transactions

About

An accomplished attorney with experience in data privacy, cybersecurity, and technology transactions. Advising a diverse range of clients, including Fortune 10, SMBs, and start-ups on regulatory compliance, risk mitigation, and data governance best practices across numerous regulatory frameworks.

Proven expertise in counseling clients on compliance with state, federal, and international privacy laws, providing timely data breach and incident response guidance, drafting and negotiating technology and data protection agreements, and providing privacy and cybersecurity subject matter expertise in support of corporate transactions.

Experience

Associate Attorney – Technology Transactions, Cybersecurity & Privacy Practice Group

Foley & Lardner, LLP January 2024 – Present Chicago, IL

Advising clients on federal and state privacy and cybersecurity regulatory obligations, risk mitigation, and data governance best practices.
Counseling clients on data breach response, including engaging forensic providers, coordinating notifications, and monitoring threat actor activity.
Developing internal privacy and security policies aligned with NIST Cybersecurity and Privacy Frameworks.
Drafting and negotiating data protection agreements, master services agreements, and licensing agreements.
Creating external-facing website privacy notices and advising on data collection practices.
Providing privacy and cybersecurity due diligence for buy-side and sell-side transactions.
Testing and providing feedback on AI-powered tools as a member of the firm's AI Evaluation and Feedback Working Group.

Associate Attorney – Healthcare & Life Sciences Practice Group

Epstein Becker & Green, PC February 2021 – January 2024 Washington, DC

Advised healthcare clients on HIPAA compliance, data governance, and incident response.
Conducted HIPAA breach risk assessments and drafted memoranda on notification obligations.
Drafted and negotiated data use and sharing agreements, ensuring compliance with regulations like GDPR.
Counseled a large EHR provider on compliance with the ONC's Information Blocking Rule.
Assisted a digital marketing agency in responding to an FTC investigation.
Created an AI Governance Policy Framework for a surgical services provider.
Provided HIPAA privacy and cybersecurity due diligence for corporate transactions.

Legislative Aide

The U.S. House of Representatives September 2014 – January 2021 Washington, DC

As Legislative Director, oversaw the Congressman's legislative agenda and provided counsel in discrete policy areas.
As Legislative Assistant, drafted legislation, collaborated with industry stakeholders, and leveraged the congressional appropriations process to implement the Congressman's policy preferences.
As Legislative Correspondent, managed the Congressman's correspondence with constituents and stakeholders.

Political-Military Action Team Intern (Secret Clearance)

The U.S. Department of State, Bureau of Political-Military Affairs September 2012 – November 2012 Washington, DC

Assessed intelligence from across U.S. government intelligence functions and drafted twice-daily classified situation reports that were disseminated to U.S. national security and foreign policy professionals.
Assisted in managing the U.S. Diplomatic Clearance Application System during the 67th session of the U.N. General Assembly, adjudicating requests of foreign governments to enter and operate in U.S. airspace.

Head Men's & Women's Tennis Coach

The University of Texas – Rio Grande Valley 2009 – 2011 Edinburg, TX

Oversaw all aspects of the men's and women's NCAA Division I tennis programs including recruitment, player management, team operations, budget management, and university and NCAA compliance.

Head Men's & Women's Tennis Coach

California Baptist University 2006 – 2009 Riverside, CA

Oversaw all aspects of the men's and women's NAIA I tennis programs including recruitment, player management, team operations, budget management, and university and NAIA compliance.

Education

Juris Doctor

The George Washington University Law School

JD Concentration in Business and Finance Law

May 2020

Master of Public Administration

St. Mary's University

December 2012

Bachelor of Arts

Vanguard University

May 2004

Bar Admissions & Certifications

Bar Admissions

Illinois
District of Columbia

Professional Certifications

IAPP - Certified Information Privacy Professional (CIPP/US)

Publications & Client Alerts

"Cybersecurity in the Age of Industry 4.0 (Part 1, Part 2)"

September 2024

"SEC Tightens Cybersecurity Requirements with Regulation S-P Amendments"

June 2024

"NIST Publishes Final 'Cybersecurity Resource Guide' on Implementing the HIPAA Security Rule"

February 2024

"California Appellate Court Empowers Privacy Agency to Immediately Enforce CPRA Regulations"

February 2024

"Nevada Joins Washington and Connecticut to Protect Consumer Health Data Privacy"

June 2023

"No More Exceptions: What to Do When the California Privacy Exemptions for Employee, Applicant and B2B Data Expire"

September 2022

"Hacking Healthcare: Cyberattack Contingency Planning and Response"

May 2022

"Under Pressure: California Clarifies Cyber Risk Management Best Practices for Healthcare Sector"

September 2021

Contact

(210) 749-0343

xristophertaylor@gmail.com

LinkedIn Profile