Melissa J. Krasnow, JD
Partner
Melissa Krasnow writes on cyber and privacy risk and insurance issues for IRMI.com. She is a partner in Minneapolis at VLP Law Group LLP and is recognized by Chambers.
She counsels companies on Health Insurance Portability and Accountability Act, Family Educational Rights and Privacy Act, financial services regulatory laws, state laws (including the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA)), and the EU General Data Protection Regulation (GDPR).
Ms. Krasnow advises companies on privacy, data security, artificial intelligence (AI), big data, technology matters, and cyber governance, including data breaches/incidents/other events (ransomware, account takeover, business email compromise, phishing, and vulnerabilities), preparing written information security programs (organizational and employee), devising incident response plans, and facilitating and participating in tabletop exercises. She counsels boards of directors and officers on privacy, data security, and technology risk oversight and developments, and reviews cyber-liability insurance policies.
She advises companies on regulatory inquiries and complying with state, federal, and international privacy, data security, AI, advertising and marketing, governance and compliance, and regulated industry laws. Ms. Krasnow prepares website and mobile application privacy policies and terms.
She works with companies on negotiating (and renegotiating in the wake of data breaches/incidents/other events) and documenting technology and commercial transactions, including master services agreements, nondisclosure agreements, data security addenda, business associate agreements, data license agreements, the GDPR and other data processing agreements, and CCPA/CPRA and other state privacy law agreements.
Ms. Krasnow is a Certified Information Privacy Professional/US and a board leadership fellow of the National Association of Corporate Directors. She holds a bachelor of arts degree in Chinese studies and political science from Wellesley College and a juris doctor from Northwestern University School of Law. She also attended the University of British Columbia.
Articles
Cyber and Privacy Risk and Insurance
Colorado Artificial Intelligence Law: Developer Disclosure Requirements
Cyber and Privacy Risk and Insurance
Colorado Artificial Intelligence Law: Enforcement and Exceptions
Cyber and Privacy Risk and Insurance
Colorado Artificial Intelligence Law: Deployer and Developer Definitions
Cyber and Privacy Risk and Insurance
Colorado Artificial Intelligence Law: Deployer Disclosure Requirements
Cyber and Privacy Risk and Insurance
Minnesota Consumer Data Privacy Act: Controllers, Processors, and Enforcement
Cyber and Privacy Risk and Insurance
Minnesota Consumer Data Privacy Act: Application, Definitions, Consumer Rights, and Notices
Cyber and Privacy Risk and Insurance
New Jersey Privacy Law: Notices, Controllers and Processors, and Enforcement
Cyber and Privacy Risk and Insurance
New Jersey Privacy Law: Application, Definitions, and Consumer Rights
Cyber and Privacy Risk and Insurance
Texas Data Privacy Act: Application, Definitions, Rights, and Notice
Cyber and Privacy Risk and Insurance
Texas Data Privacy Act: Controllers, Assessments, Data, Enforcement
Cyber and Privacy Risk and Insurance
California Age-Appropriate Design Code Act: Application, Assessments
Cyber and Privacy Risk and Insurance
California Privacy Rights Act: Consumer Rights, Enforcement, Security
Cyber and Privacy Risk and Insurance
Connecticut Data Privacy Act: Controllers and Processors, Assessments, De-identified Data, and Enforcement
Cyber and Privacy Risk and Insurance
UCPA: Application, Definitions, Consumer Rights, and Obligations
Cyber and Privacy Risk and Insurance
Colorado Privacy Act: Controllers, Assessments, Data, and Enforcement
Cyber and Privacy Risk and Insurance
Colorado Privacy Act: Application, Definitions, Rights, and Notices
Cyber and Privacy Risk and Insurance
VCDPA: Assessments, De-Identified Data, Enforcement, and Exceptions
Cyber and Privacy Risk and Insurance
VCDPA: Application, Definitions, Consumer Rights, and Obligations
Cyber and Privacy Risk and Insurance
California Privacy Rights Act: Background, Application, and Definitions
Cyber and Privacy Risk and Insurance
Further Amendment to the California Consumer Privacy Act of 2018
Cyber and Privacy Risk and Insurance
California Consumer Privacy Act Regulations: Privacy Policy and Notice
Cyber and Privacy Risk and Insurance
Breach Notification Laws—State Attorney General or Regulator Notice
Cyber and Privacy Risk and Insurance
State Breach Notification Laws: Personal Information Definition
Cyber and Privacy Risk and Insurance
Changes in State Breach Notification and Security Procedures Laws
Cyber and Privacy Risk and Insurance
Business Associate Agreement Requirements and Negotiated Provisions
Cyber and Privacy Risk and Insurance
California Privacy Laws Change: Identity Theft Prevention and Mitigation Services
Cyber and Privacy Risk and Insurance
California Minors under Age 18: Privacy Requirements for Deleting Content/Information and Advertising/Marketing
Cyber and Privacy Risk and Insurance
Hacking, Malware, and Social Engineering—Definitions of and Statistics about Cyber Threats Contributing to Breaches
Cyber and Privacy Risk and Insurance