Carol A. F. Umhoefer

Partner

Co-Chair, EMEA Data Protection, Privacy and Security group
Foreign Legal Consultant, Not Admitted to Practice Law in Florida
Admitted in New York and France
Certified as a Foreign Legal Consultant by the Florida Supreme Court

Carol Umhoefer is an excellent advisor. She is always available to answer our questions and help us navigate the complexity of data privacy laws. She provides a practical approach to our business that ensures compliance. She is our go-to resource for all data protection and privacy questions. I have worked with other privacy counsel, and Carol is the best.

— Client testimonial to The Legal 500 US 2024

Emailcarol.umhoefer@dlapiper.com

Call+1 305 423 8528

Miami

About

Areas of FocusData, Privacy and Cybersecurity Consumer Goods, Food and Retail Financial Services Insurance Life Sciences Technology Intellectual Property Regulatory and Government Affairs

Bar admissionsNew YorkParis

Languages

Education

Harvard Law School, J.D. cum laude, 1992

University of Wisconsin B.A. Phi Beta Kappa, 1988

Awards

Bylines

Author, "CCPA and GDPR: Getting to the finish line," LegiTech, June 2020
Co-author, "Are You Subject to E.U. Personal Data Regulations?," NAPBS Journal, July-August, 2016
Co-author, "EU: new obligations for digital services providers and operators of essential services," Intellectual Property and Technology News, June 2016
Co-author, "Recent French developments raise the heat on encryption," Cyber Security Law & Practice, June 2016
Co-author, "French Data Protection Authority Orders Fine of 100,000 Euros Against Google Inc. for Violation of Right to Be Forgotten," Privacy and Security Law Report, May 2016
Author, "Retailer trends: In-store big data analytics," Law à la Mode Issue 19, April 2016
Co-author, "The WP29’s updated Opinion following the Costeja ruling," E-Commerce Law and Policy, March 2016
Co-author, "Wearable technologies, Watch out for fashion’s new market opportunities and challenges," Law à la Mode, May-June 2015
Co-author, "La construction controversée du droit à l’oubli," Option Droit & Affaires, April 2015
Author, "Retailers need to prepare for the new EU Data Protection Regulation," Law à la Mode, February 2015
"Motorola v. Uzan: What happens when non-US statutes block US court discovery served on US branches?," January 2015
Author, "How EU Data Protection Laws Impact Cross-Border FCPA Investigations," Global Anti-Corruption Perspective, September 2014
Co-author, "EU law on cookies," Intellectual Property Update, September 2014
Co-author, "France: CNIL to Begin Cookies Enforcement in October," Data Protection, Privacy and Security Alert (US), September 2014
Co-author, "France’s Data Protection Authority unveils its inspection targets for 2014," Data Protection, Privacy and Security Alert (US), May 2014
Author, "CNIL's new rules on whistleblowing simplify hotline implementation in France," Data Protection, Privacy and Security Alert (US), February 2014
Co-author, "Data Protection Laws of the World Handbook: Third Edition," Data Protection Alert (EMEA), January 2014

Seminars

Speaker, "GDPR – Latest Developments," AIPLA, December 2020
Speaker, "Transatlantic data protection law – a US perspective," INFOTECH, Austria, November 2020
Speaker, "Navigating the changing seas of privacy laws (CCPA, GDPR and other data security and privacy laws)," Franchise Crew In-house Counsel Event, Atlanta, January 2020
Speaker, "How data catalogs help you prepare for CCPA," sponsored by Data.World, January 2020
Speaker, "GDPR Update," The Conference Board – HR M&A Council, Princeton, New Jersey, October 2019
Speaker, "Cyber-Security and Data Privacy in the IP World: What You Need to Know About the Intersection of Cyber-Security, Data Privacy and IP Law," AIPLA CLE Webinar, July 2019
Speaker, "DLA Piper TechLaw Series - California Consumer Privacy Act," Chicago, July 2019
Speaker, "HCP Marketing," DLA Piper’s GDPR and Life Sciences Day, London, June 2019
Speaker, "Are You GDPR Compliant? Understanding Its Requirements, Penalties, and Impact on the IP World," AIPLA Spring Meeting, Philadelphia, May 2019
Panelist, "Consumer Privacy," TransUnion Insurance Summit, Chicago, May 2019
Speaker, "Managing Data Privacy Compliance at the Crossroads of HIPAA, GDPR, and CCPA: Guidance for Attorneys on Managing Operational Issues," Blue Cross Blue Shield National Summit, Grapevine, Texas, April 2019
Speaker, "The California Consumer Privacy Act and Its Impact on Healthcare Companies," DLA Piper webinar, April 2019
Speaker, "Impacts of GDPR & Big Data," ALIS Law, Los Angeles, January 2019
Speaker, "Operationalizing CCPA," DLA Piper webinar, January 2019
Speaker, "California Consumer Privacy Act and GDPR – how do they differ?" DLA Piper webinar, November 2018
Speaker, "National Association of Women Lawyers," November 2018
Speaker, "What you need to know about GDPR: for recruiters and HR professionals," January 2018
Speaker, “EU Data Privacy, Cybersecurity and their Impact on Reporting and Bribery Investigations: Strategic Insights for Cross-Border Transfers,” 18th Annual New York Conference on Foreign Corrupt Practices Act, May 2016
Speaker, "The Digital Landscape in Europe: How Will a New Safe Harbor agreement and an Expansive New Privacy Law Shape Business Strategy?" The Association of General Counsel Spring Meeting, California, May 2016
Speaker, "Stay Ahead of Global Privacy Trends at this Essential Live Even," Bloomberg Law, Washington, DC, February 2016
Speaker, DLA Piper Tech Day, The Peninsula Hotel, Paris, December 2014
Speaker, "Innovation, "Data Security and Data Protection", Atos Stakeholder Day, Bezons, France, October 2014
Speaker, on the topics of fashion bloggers, e-commerce and wearable technologies, FashiOnline, Milan, January 2014
Speaker "Codes of Conduct for Global Companies in Global Markets", Compliance Week Europe, Brussels, October 2013