Carol A. F. Umhoefer

Carol Umhoefer's practice encompasses information technology and regulatory compliance. She has extensive experience advising clients on international and multi-jurisdictional privacy compliance and cyber issues, including data protection, privacy rights, cyber security and breach notification, document retention, and encryption regulations.

As a member of the Paris bar and having practiced for more than 20 years in France, Carol has experience with respect to GDPR, EU ePrivacy, and EU e-commerce requirements.

She also has extensive experience advising on multinational privacy assessments and compliance programs. She regularly conducts privacy impact assessments and privacy-by-design reviews on a variety of products and technology solutions. Carol advises clients on privacy issues in connection with the deployment of blockchain and related services, artificial intelligence, and machine learning.

Carol advises clients with data protection issues arising in a variety of regulatory compliance and investigations scenarios, in particular with consumer protection issues, and pharmaceuticals and medical devices, as well as OFAC and DoJ. She regularly advises on global and regional whistleblowing hotline and e-discovery projects.

Carol’s practice encompasses a broad range of sectors, including pharmaceutical, medical device, and medtech companies; financial services and fintech companies; professional services; online and traditional retailers; and many technology providers in both the B2B and B2C channels.

She is certified as a Foreign Legal Consultant by the Florida Supreme Court, in addition to being admitted in New York and Paris, France.