Kerianne N. Tobitsch

Kerianne Tobitsch's practice focuses on data privacy, cybersecurity, and consumer protection for multinational clients. She advises clients on regulatory investigations, complex commercial litigation, and compliance matters related to privacy, consumer protection, and cybersecurity, including for emerging technology matters such as artificial intelligence, machine learning, the Internet of Things (IoT), cloud migration, and industrial internet.

She advises clients on compliance with U.S. and international data privacy and security obligations, governance, and cross-border data transfers under the Federal Trade Commission (FTC) Act, EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) (and other state privacy laws), Health Insurance Portability and Accountability Act (HIPAA), and Illinois Biometric Information Privacy Act (BIPA).

Kerianne leads clients in handling U.S. and international cybersecurity incidents, including advising clients on forensic investigations, notification and other legal obligations, and related regulatory investigations. She represents clients in responding to cybersecurity and privacy investigations by the government and regulators, including the FTC, DOJ, and SEC.

Kerianne handles internal investigations and complex commercial litigation, including breach of contract, tort, and fraud disputes and claims arising under the Fair Credit Reporting Act (FCRA). She has represented clients across industries, including financial services, technology, consumer reporting, biotechnology, health care, and retail. Her litigation experience includes discovery, depositions, motion practice, witness preparation, and trial preparation.

Kerianne is a frequent speaker on U.S. and international data privacy and protection and is the author of articles and book chapters on emerging technologies.

Kerianne maintains a pro bono practice. She has handled matters pursuant to the Hague Convention on the Civil Aspects of International Child Abduction.