Sally Robertson is an associate in DLA Piper’s Data Protection, Privacy, and Security practice in the firm’s Atlanta office. She advises clients of all industry sectors, both global and domestic, on privacy, security, and incident response management. Sally has experience building privacy programs, drafting and negotiating data protection agreements, drafting privacy policies, conducting privacy due diligence in corporate transactions, as well as providing advice regarding complex global privacy compliance issues.
Sally a certified information privacy professional (CIPP-US) and has specific expertise in student and children’s privacy law, including the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA). She also assists clients on state, federal, and international privacy laws and regulations, including the California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and the Federal Trade Commission (FTC) Act.
Before joining DLA Piper, Sally worked as privacy counsel at the Georgia Institute of Technology, a public institution of higher education with a large research practice and a global footprint. She helped to build a privacy program and advised on a variety of privacy laws and complex privacy frameworks. Sally also worked as a privacy analyst at a global healthcare technology company, managing the enterprise-wide HIPAA incident response practice.
