Skip to Content

Profile image of Melissa Krasnow

(312) 350–1082

[email protected]

VLP Law Group LLP

Minneapolis , MN

Melissa J. Krasnow, JD

Partner


Ms. Krasnow writes on cyber and privacy risk and insurance issues for IRMI.com.

She is a partner in Minneapolis at VLP Law Group LLP, who is the sole attorney who is recognized in both Nationwide Privacy & Data Security and Nationwide Technology for two consecutive years (2022 and 2023) in Chambers USA.

Her practice encompasses the following.

  • Privacy, data security, big data, and artificial intelligence
    • The Health Insurance Portability and Accountability Act; Family Educational Rights and Privacy Act; financial services regulatory laws; (including Gramm-Leach-Bliley Act); state laws, including the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA) and other state laws; EU General Data Protection Regulation (GDPR)
    • Data breaches/incidents/other events (ransomware, account takeover, business email compromise, phishing, and vulnerabilities), cyber governance, and crisis management 
    • Written information security programs (WISPs), incident response plans, tabletop exercises 
    • Cyber-liability insurance policy review
  • Advice to boards of directors and officers on privacy, data security, and technology oversight and developments
    • Website and mobile application privacy policies and terms and technology policies
  • Technology and commercial transactions
    • Master services agreements
    • Nondisclosure agreements
    • Data security addenda
    • Business associate agreements
    • Data processing agreements
    • CCPA/CPRA and other state privacy law agreements
  • Mergers and acquisitions

Ms. Krasnow is a Certified Information Privacy Professional/US and a board leadership fellow of the National Association of Corporate Directors.

Ms. Krasnow holds a bachelor of arts degree in Chinese studies and political science from Wellesley College and a juris doctor from Northwestern University School of Law. She also attended the University of British Columbia.


Articles

Cyber and Privacy Risk and Insurance

Washington My Health My Data Act: Requirements and Exceptions

August 25, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Washington My Health My Data Act: Definitions

August 25, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Controllers, Assessments, Data, Enforcement

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Exceptions

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Application, Definitions, Rights, and Notice

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Age-Appropriate Design Code Act: Other Requirements

January 27, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Age-Appropriate Design Code Act: Application, Assessments

January 27, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Consumer Rights, Enforcement, Security

January 04, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Controllers and Processors, Assessments, De-identified Data, and Enforcement

June 16, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Application and Definitions

June 03, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Exceptions

June 02, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

UCPA: Application, Definitions, Consumer Rights, and Obligations

April 21, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

UCPA: Deidentified Data, Enforcement, and Exceptions

April 14, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Exceptions

August 18, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Controllers, Assessments, Data, and Enforcement

July 21, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Application, Definitions, Rights, and Notices

July 01, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

VCDPA: Assessments, De-identified Data, Enforcement, and Exceptions

March 19, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

VCDPA: Application, Definitions, Consumer Rights, and Obligations

March 12, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Exceptions

January 29, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Background, Application, and Definitions

December 11, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Further Amendment to the California Consumer Privacy Act of 2018

October 09, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Consumer Privacy Act Regulations: Privacy Policy and Notice

September 04, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

The New York SHIELD Act Reasonable Security Requirement

May 29, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in Other California Privacy and Data Security Laws

January 24, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

The California Consumer Privacy Act of 2018, as Amended

October 18, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Summary of Amendment to Nevada Privacy Law

June 21, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Breach Notification Laws—State Attorney General or Regulator Notice

February 28, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Massachusetts Amends Breach Notification Law

January 25, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

A Summary of the California Consumer Privacy Act of 2018

September 28, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Nevada Passes New Privacy Notice Law

April 06, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Application of EU's General Data Protection Regulation

March 09, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

State Breach Notification Laws: Personal Information Definition

January 26, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in State Breach Notification and Security Procedures Laws

December 01, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Business Associate Agreement Requirements and Negotiated Provisions

September 15, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Cyber-Security Event Recovery Plans

February 03, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance on Ransomware

January 06, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance for Incident Response Plans

May 08, 2015 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Laws Change: Identity Theft Prevention and Mitigation Services

October 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in State Breach Notification Laws

August 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance for Managing Cyber-Security Risks

May 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Minors under Age 18: Privacy Requirements for Deleting Content/Information and Advertising/Marketing

September 01, 2013 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Securities and Exchange Commission Issues Guidance on Cybersecurity and Cyber Incident Disclosure

December 31, 2011 | Melissa J Krasnow