Skip to Content

(312) 350–1082

[email protected]

VLP Law Group LLP
Minneapolis, MN

Melissa J. Krasnow, JD

Partner


Melissa Krasnow writes on cyber and privacy risk and insurance issues for IRMI.com. She is a partner in Minneapolis at VLP Law Group LLP and is recognized by Chambers.

She counsels companies on Health Insurance Portability and Accountability Act, Family Educational Rights and Privacy Act, financial services regulatory laws, state laws (including the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA)), and the EU General Data Protection Regulation (GDPR).

Ms. Krasnow advises companies on privacy, data security, artificial intelligence (AI), big data, technology matters, and cyber governance, including data breaches/incidents/other events (ransomware, account takeover, business email compromise, phishing, and vulnerabilities), preparing written information security programs (organizational and employee), devising incident response plans, and facilitating and participating in tabletop exercises. She counsels boards of directors and officers on privacy, data security, and technology risk oversight and developments, and reviews cyber-liability insurance policies.

She advises companies on regulatory inquiries and complying with state, federal, and international privacy, data security, AI, advertising and marketing, governance and compliance, and regulated industry laws. Ms. Krasnow prepares website and mobile application privacy policies and terms.

She works with companies on negotiating (and renegotiating in the wake of data breaches/incidents/other events) and documenting technology and commercial transactions, including master services agreements, nondisclosure agreements, data security addenda, business associate agreements, data license agreements, the GDPR and other data processing agreements, and CCPA/CPRA and other state privacy law agreements.

Ms. Krasnow is a Certified Information Privacy Professional/US and a board leadership fellow of the National Association of Corporate Directors. She holds a bachelor of arts degree in Chinese studies and political science from Wellesley College and a juris doctor from Northwestern University School of Law. She also attended the University of British Columbia.


Articles

Cyber and Privacy Risk and Insurance

Colorado Artificial Intelligence Law: Developer Disclosure Requirements

September 12, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Artificial Intelligence Law: Enforcement and Exceptions

September 12, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Artificial Intelligence Law: Deployer and Developer Definitions

September 12, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Artificial Intelligence Law: Deployer Disclosure Requirements

September 12, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Minnesota Consumer Data Privacy Act: Exceptions

May 09, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Minnesota Consumer Data Privacy Act: Controllers, Processors, and Enforcement

May 08, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Minnesota Consumer Data Privacy Act: Application, Definitions, Consumer Rights, and Notices

May 07, 2025 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

New Jersey Privacy Law: Exceptions

May 31, 2024 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

New Jersey Privacy Law: Notices, Controllers and Processors, and Enforcement

May 30, 2024 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

New Jersey Privacy Law: Application, Definitions, and Consumer Rights

May 29, 2024 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Washington My Health My Data Act: Requirements and Exceptions

August 25, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Washington My Health My Data Act: Definitions

August 25, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Application, Definitions, Rights, and Notice

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Exceptions

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Texas Data Privacy Act: Controllers, Assessments, Data, Enforcement

July 21, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Age-Appropriate Design Code Act: Application, Assessments

January 27, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Age-Appropriate Design Code Act: Other Requirements

January 27, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Consumer Rights, Enforcement, Security

January 04, 2023 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Controllers and Processors, Assessments, De-identified Data, and Enforcement

June 16, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Application and Definitions

June 03, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Connecticut Data Privacy Act: Exceptions

June 02, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

UCPA: Application, Definitions, Consumer Rights, and Obligations

April 21, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

UCPA: Deidentified Data, Enforcement, and Exceptions

April 14, 2022 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Exceptions

August 18, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Controllers, Assessments, Data, and Enforcement

July 21, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Colorado Privacy Act: Application, Definitions, Rights, and Notices

July 01, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

VCDPA: Assessments, De-Identified Data, Enforcement, and Exceptions

March 19, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

VCDPA: Application, Definitions, Consumer Rights, and Obligations

March 12, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Exceptions

January 29, 2021 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Rights Act: Background, Application, and Definitions

December 11, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Further Amendment to the California Consumer Privacy Act of 2018

October 09, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Consumer Privacy Act Regulations: Privacy Policy and Notice

September 04, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

The New York SHIELD Act Reasonable Security Requirement

May 29, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in Other California Privacy and Data Security Laws

January 24, 2020 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

The California Consumer Privacy Act of 2018, as Amended

October 18, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Summary of Amendment to Nevada Privacy Law

June 21, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Breach Notification Laws—State Attorney General or Regulator Notice

February 28, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Massachusetts Amends Breach Notification Law

January 25, 2019 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

A Summary of the California Consumer Privacy Act of 2018

September 28, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Nevada Passes New Privacy Notice Law

April 06, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Application of EU's General Data Protection Regulation

March 09, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

State Breach Notification Laws: Personal Information Definition

January 26, 2018 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in State Breach Notification and Security Procedures Laws

December 01, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Business Associate Agreement Requirements and Negotiated Provisions

September 15, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Cyber Security Event Recovery Plans

February 03, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance on Ransomware

January 06, 2017 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance for Incident Response Plans

May 08, 2015 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Privacy Laws Change: Identity Theft Prevention and Mitigation Services

October 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Changes in State Breach Notification Laws

August 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Guidance for Managing Cyber Security Risks

May 01, 2014 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

California Minors under Age 18: Privacy Requirements for Deleting Content/Information and Advertising/Marketing

September 01, 2013 | Melissa J Krasnow

Cyber and Privacy Risk and Insurance

Securities and Exchange Commission Issues Guidance on Cyber Security and Cyber Incident Disclosure

December 31, 2011 | Melissa J Krasnow