Skip to main content
|

Add a bookmark to get started

Bookmarks info
carol umhoefer

Carol A. F. Umhoefer

Partner
Co-Chair, EMEA Data Protection, Privacy and Security group
Foreign Legal Consultant, Not Admitted to Practice Law in Florida
Admitted in New York and France
Certified as a Foreign Legal Consultant by the Florida Supreme Court
Carol Umhoefer is an excellent advisor. She is always available to answer our questions and help us navigate the complexity of data privacy laws. She provides a practical approach to our business that ensures compliance. She is our go-to resource for all data protection and privacy questions. I have worked with other privacy counsel, and Carol is the best.
— Client testimonial to The Legal 500 US 2024
Miami
About

Carol Umhoefer's practice encompasses information technology and regulatory compliance. She has extensive experience advising clients on international and multi-jurisdictional privacy compliance and cyber issues, including data protection, privacy rights, cyber security and breach notification, artificial intelligence, document retention, and encryption regulations.

As a member of the Paris bar and having practiced for more than 20 years in France, Carol has extensive experience with respect to GDPR, EU ePrivacy, and EU e-commerce requirements. She also advises on the EU AI Act, the EU Data Act, and NIS2. 

Carol has extensive experience advising on multinational privacy assessments and compliance programs. She regularly conducts privacy impact assessments and privacy-by-design reviews on a variety of products and technology solutions. Carol advises clients on privacy issues specific to the deployment of blockchain and related services, artificial intelligence, and machine learning.

Carol advises clients with data protection issues arising in a variety of regulatory compliance and investigations scenarios, in particular as relate to consumer protection issues, and pharmaceuticals and medical devices, as well as OFAC and DoJ investigations. She regularly advises on global and regional whistleblowing hotline and e-discovery projects.

Carol’s practice encompasses a broad range of sectors, including pharmaceutical, medical device, and medtech companies; financial services and fintech companies; professional services; online and traditional retailers; manufacturing; and many technology providers in both the B2B and B2C channels.

She is certified as a Foreign Legal Consultant by the Florida Supreme Court, in addition to being admitted in New York and Paris, France.

 
Areas of FocusData, Privacy and CybersecurityConsumer Goods, Food and RetailFinancial ServicesInsuranceLife SciencesTechnologyIntellectual PropertyRegulatory and Government Affairs
Bar admissionsNew YorkParis
Languages
  • French
  • English
Education

  • J.D., Harvard Law School, 1992

    cum laude 

  • B.A., University of Wisconsin, 1988

    Phi Beta Kappa

Awards

Chambers Global

  • Spotlight Table Foreign Expert, USA Privacy & Data Security (Foreign Expert for France), (2018-2025)

The Legal 500 United States

  • Leading Lawyer, Cyber Law (including Data Privacy and Data Protection), (2020-2024) 
  • Leading Lawyer, Data Privacy and Data Protection, (2020)
  • Recommended, Cyber Law (including Data Privacy and Data Protection), (2018-2019) 
  • Recommended, Data Privacy and Data Protection, (2018-2019) 
  • Recommended, Technology: Data Protection & Privacy, (2017)
Additional Awards
  • Selected as the sole Client Choice Award recipient for Information Technology in the New York market (2017)
  • The Best Lawyers in France has repeatedly recognized Carol for her practice in Information Technology Law and Privacy and Data Security Law (2014-2025)

Bylines

  • Author, "CCPA and GDPR: Getting to the finish line," LegiTech, June 2020 
  • Co-author, "Are You Subject to E.U. Personal Data Regulations?," NAPBS Journal, July-August, 2016
  • Co-author, "EU: new obligations for digital services providers and operators of essential services," Intellectual Property and Technology News, June 2016
  • Co-author, "Recent French developments raise the heat on encryption," Cyber Security Law & Practice, June 2016
  • Co-author, "French Data Protection Authority Orders Fine of 100,000 Euros Against Google Inc. for Violation of Right to Be Forgotten," Privacy and Security Law Report, May 2016
  • Author, "Retailer trends: In-store big data analytics," Law à la Mode Issue 19, April 2016
  • Co-author, "The WP29’s updated Opinion following the Costeja ruling," E-Commerce Law and Policy, March 2016
  • Co-author, "Wearable technologies, Watch out for fashion’s new market opportunities and challenges," Law à la Mode, May-June 2015
  • Co-author, "La construction controversée du droit à l’oubli," Option Droit & Affaires, April 2015
  • Author, "Retailers need to prepare for the new EU Data Protection Regulation," Law à la Mode, February 2015
  • "Motorola v. Uzan: What happens when non-US statutes block US court discovery served on US branches?," January 2015
  • Author, "How EU Data Protection Laws Impact Cross-Border FCPA Investigations," Global Anti-Corruption Perspective, September 2014
  • Co-author, "EU law on cookies," Intellectual Property Update, September 2014
  • Co-author, "France: CNIL to Begin Cookies Enforcement in October," Data Protection, Privacy and Security Alert (US), September 2014
  • Co-author, "France’s Data Protection Authority unveils its inspection targets for 2014," Data Protection, Privacy and Security Alert (US), May 2014
  • Author, "CNIL's new rules on whistleblowing simplify hotline implementation in France," Data Protection, Privacy and Security Alert (US), February 2014
  • Co-author, "Data Protection Laws of the World Handbook: Third Edition," Data Protection Alert (EMEA), January 2014

Seminars

  • Speaker, "GDPR – Latest Developments," AIPLA, December 2020
  • Speaker, "Transatlantic data protection law – a US perspective," INFOTECH, Austria, November 2020
  • Speaker, "Navigating the changing seas of privacy laws (CCPA, GDPR and other data security and privacy laws)," Franchise Crew In-house Counsel Event, Atlanta, January 2020
  • Speaker, "How data catalogs help you prepare for CCPA," sponsored by Data.World, January 2020
  • Speaker, "GDPR Update," The Conference Board – HR M&A Council, Princeton, New Jersey, October 2019
  • Speaker, "Cyber-Security and Data Privacy in the IP World: What You Need to Know About the Intersection of Cyber-Security, Data Privacy and IP Law," AIPLA CLE Webinar, July 2019
  • Speaker, "DLA Piper TechLaw Series - California Consumer Privacy Act," Chicago, July 2019
  • Speaker, "HCP Marketing," DLA Piper’s GDPR and Life Sciences Day, London, June 2019
  • Speaker, "Are You GDPR Compliant? Understanding Its Requirements, Penalties, and Impact on the IP World," AIPLA Spring Meeting, Philadelphia, May 2019
  • Panelist, "Consumer Privacy," TransUnion Insurance Summit, Chicago, May 2019
  • Speaker, "Managing Data Privacy Compliance at the Crossroads of HIPAA, GDPR, and CCPA: Guidance for Attorneys on Managing Operational Issues," Blue Cross Blue Shield National Summit, Grapevine, Texas, April 2019
  • Speaker, "The California Consumer Privacy Act and Its Impact on Healthcare Companies," DLA Piper webinar, April 2019 
  • Speaker, "Impacts of GDPR & Big Data," ALIS Law, Los Angeles, January 2019
  • Speaker, "Operationalizing CCPA," DLA Piper webinar, January 2019
  • Speaker, "California Consumer Privacy Act and GDPR – how do they differ?" DLA Piper webinar, November 2018
  • Speaker, "National Association of Women Lawyers," November 2018
  • Speaker, "What you need to know about GDPR: for recruiters and HR professionals," January 2018
  • Speaker, “EU Data Privacy, Cybersecurity and their Impact on Reporting and Bribery Investigations: Strategic Insights for Cross-Border Transfers,” 18th Annual New York Conference on Foreign Corrupt Practices Act, May 2016
  • Speaker, "The Digital Landscape in Europe: How Will a New Safe Harbor agreement and an Expansive New Privacy Law Shape Business Strategy?" The Association of General Counsel Spring Meeting, California, May 2016
  • Speaker, "Stay Ahead of Global Privacy Trends at this Essential Live Even," Bloomberg Law, Washington, DC, February 2016
  • Speaker, DLA Piper Tech Day, The Peninsula Hotel, Paris, December 2014
  • Speaker, "Innovation, "Data Security and Data Protection", Atos Stakeholder Day, Bezons, France, October 2014
  • Speaker, on the topics of fashion bloggers, e-commerce and wearable technologies, FashiOnline, Milan, January 2014
  • Speaker "Codes of Conduct for Global Companies in Global Markets", Compliance Week Europe, Brussels, October 2013

Memberships And Affiliations

  • International Association of Privacy Professionals

Latest insights

Publication
Abstract view of building

Colorado Privacy Act revised draft rules released

28 December 2022 .11 minute read

News
Abstract view of building

DLA Piper advises TIME on launch of its sustainability division, “TIME CO2”

15 November 2022 .2 minute read

Publication
Mountains

Expert opinion on US surveillance laws highlights FISA risk for data transfers to the US

15 February 2022 .5 minute read

View All

Connect

Phone

+1 305 423 8528
(Work, Miami)
CallvCardLinkedInPrint
Legal noticesPrivacy policyCookie policyModern slaveryFraud AlertSitemap

DLA Piper is a global law firm operating through various separate and distinct legal entities. For further information about these entities and DLA Piper's structure, please refer to the Legal Notices page of this website. All rights reserved. Attorney advertising.

© 2025 DLA Piper