About me
Zach’s practice focuses on privacy and data security. Specifically, Zach assists clients in the areas of privacy compliance, data governance, and guidance in the aftermath of an information security incident, including data breach. Zach has experience advising clients with respect to FTC investigations, federal privacy regulations (such as HIPAA, FCRA, TCPA and GLBA), state laws governing personally identifiable information (e.g., CCPA/CPRA), foreign privacy regulations (e.g., PIPEDA and GDPR), artificial intelligence, and government contracting security requirements (e.g., NIST 800-171 and CMMC 2.0). For his clients, he also provides regulatory analysis, risk management, policy development, training, and audits. Zach speaks and writes regularly on cutting-edge data privacy and cybersecurity issues and is a Certified Information Privacy Professional in the fields of United States and European Union laws and regulations. Zach also holds the Certified Information Privacy Manager (CIPM) accreditation from the International Association of Privacy Professionals (IAPP). In 2025, Zach was globally certified as an Artificial Intelligence Governance Professional by the IAPP.