DATA PRIVACY, SECURITY & AI TRACK: Data Security and Best Practices to Protect Consumer Information

Shareholder, Buchalter

Wendy Lee is a shareholder at Buchalter and Chair of its Fintech and AI practice group. Prior to joining Buchalter in April 2024, Wendy was the EVP and Chief Legal Officer of Sagent, a servicing technology provider. Wendy has been engaged as a legal executive in both mortgage servicing and technology for more than 20 years. During this time, Wendy has played the role of lawyer, consultant (Deloitte), servicer (Washington Mutual Bank), start-up strategist, and even was a database architect way back when in her past life. She works on the impact of data privacy laws on the servicing community and is honored to contribute to the movement to prevent upcoming regulatory and legal changes from unnecessarily impacting mortgage operations.

Partner, Cooley LLP

Michael has focused on cyber/data/privacy issues in the areas of technology, innovation, retail and consumer solutions, life sciences, manufacturing, financial services, and healthcare since 2007. He advises clients on all legal aspects of global privacy and data protection, data security, data breach, information technology, and related restrictions on data collection and transfer. He has represented companies before numerous government agencies and bodies, including the US Federal Trade Commission, the US Department of Justice, and the US Securities and Exchange Commission, as well as data protection authorities around the world, regarding disclosure of data security compliance issues, internal investigation findings, remediation measures and settlement terms.

Partner, Deangelus Goralczyk PLLC

Jacki is a partner and founding member of DeAngelus Goralczyk, PLLC. She devotes her practice to helping clients navigate complex data privacy and cybersecurity regulatory regimes in a creative and effective manner. Jacki counsels clients on a wide variety of regulatory requirements, including the Gramm-Leach-Bliley Act (“GLBA”), the General Data Protection Regulation (“GDPR”), New York's SHIELD Act, NYS DFS 500, Fair Credit Reporting Act (“FCRA”), and the Health Insurance Portability and Accountability Act (“HIPAA”) as well as new and emerging state and federal privacy regulations. Jacki’s passion ultimately led her to teach data privacy and cyber security law at Albany Law School after receiving her Masters of Legal Letters (LLM) in Cyber Security and Data Privacy. She was the first graduate of the program from Albany Law. Jacki is a Certified Information Privacy Professional/US (“CIPP/US”) and Certified Information Privacy Manager (“CIPM”), as certified by the International Association of Privacy Professionals.

Senior Partner, Garris Horn LLP

John Levonick is a seasoned lawyer who focuses on consumer finance, regulatory compliance and technology. He has extensive experience drafting and negotiating technology and services agreements, capital markets purchase and sale agreements, advising on consumer regulatory compliance laws, mortgage quality control and due diligence, cybersecurity and data privacy, supporting global technology companies within the heavily regulated U.S. financial markets. John is a nationally recognized speaker on emerging technology, cybersecurity and data privacy, FinTech, consumer finance regulatory compliance, GRC, QC/Due Diligence, and the capital markets.

Managing Member, Shirk Law PLLC

David Shirk is the managing member of Shirk Law PLLC. He represents financial institutions, retail and wholesale mortgage bankers, lead generators, and software vendors. David advises innovating clients on state and federal regulatory compliance, licensing, originator compensation, and responding to exams or Bureau investigations. Prior to joining LotsteinLegal in 2011, which changed its name to Shirk Law in 2020, David spent 20 years in executive roles at mortgage companies. Including as functional architect of two loan origination systems at three top ten lenders. David is admitted to the bar in ten states. He holds a J.D. and an MBA.