Mandy Cartwright is a Partner in the Phoenix office of Lewis Brisbois and a Vice Chair of the Data Privacy & Cybersecurity Practice.
Having spent years as an in-house attorney, most recently as the Chief Privacy Officer for a nationwide financial institution, Mandy understands the challenges facing businesses as they craft their data privacy programs in light of the ever-changing legal landscape regarding how data may be collected, protected, and used. Mandy leverages her in-house experience to provide pragmatic advice to clients on how to develop and maintain their data privacy and security compliance programs under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the EU and UK General Data Protection Regulation (GDPR), the Gramm Leach Bliley Act (GLBA), and other US federal and state, and international, privacy and cybersecurity regulations, while still balancing the needs of the business.
In addition, Mandy counsels clients on cybersecurity incidents, privacy policies, privacy by design, data inventories and mapping, data retention and minimization, and privacy impact assessments. Mandy’s experience extends to technology transactions, data and software licensing/usage, and readying companies for mergers and acquisitions.