Kari Prochaska

Kari has extensive experience advising clients on global data protection compliance programs, how privacy and data security legislative and regulatory requirements in the UK, EU, and globally, may impact their business practices. She drafts multi-jurisdictional data protection compliance documentation and provides counselling on cross-border data transfer and localisation requirements, consumer-facing privacy notices and governance documentation, and data protection impact assessments. She advises clients on the use of website tracking technologies, responses to sensitive data subject rights requests and complaints, and communications with data protection regulators.

Kari provides advice on AI, privacy, and cybersecurity risks in private equity and M&A transactions, including both pre-acquisition diligence and post-closing integration strategies. She counsels clients on UK, EU, and U.S. data protection issues in fund formation and asset management documentation. Further, she assists clients regarding data security incident response and crisis management by helping clients navigate the regulatory and legal landscape through the response, investigation, and notification stages, particularly with respect to the analysis of international data breach notification obligations, the preparation of required notifications pursuant to UK, EU, and U.S. breach notification requirements, and the development of media strategies to address incidents. 

Kari also maintains an active pro bono practice focusing on data protection assistance for non-profit organisations, civil rights, voting rights, and immigration matters.