Kathryn M. Rattigan advises clients on data privacy and security, cybersecurity, and compliance with related state and federal laws. She helps organizations across industries assess and manage risk in technology and software contracts, outsourcing arrangements, and vendor management, and she counsels clients in government investigations involving alleged non-compliance. A Certified Information Privacy Professional, Kathryn develops and implements privacy and security programs, including policies and procedures under laws such as the California Consumer Privacy Act, HIPAA, TCPA, COPPA, and FERPA. She also supports breach preparedness and incident response, including notification and remediation, and represents clients in privacy and cybersecurity litigation and enforcement matters, including class actions and claims involving consumer privacy rights and website tracking.

Kathryn also advises on information governance and records management, helping clients with data mapping and classification, retention and destruction policies, training, and ongoing program maintenance to improve efficiency and reduce risk. In addition, she supports clients building artificial intelligence governance programs by evaluating AI tools, negotiating AI vendor contracts, implementing AI platforms, establishing cross-functional governance structures, and conducting risk assessments and legal surveys. She further counsels businesses on commercial drone use and FAA compliance, including registration, Part 107 waivers, contracting, insurance considerations, applicable state and local rules, and drone-related litigation. Kathryn is active in thought leadership through nationwide presentations and extensive writing.