Drew Berube focuses on data privacy, technology, and corporate matters. He is a Certified Information Privacy Professional in the United States (CIPP/US), Europe (CIPP/E), and Canada (CIPP/C) and advises clients on compliance with various privacy laws, including the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA). He assists organizations in safeguarding sensitive data and navigating the legal and regulatory landscape of data protection before and after security incidents. His work includes drafting and reviewing data protection agreements, privacy disclosures, website privacy policies, and terms of use.
In the corporate realm, Drew is involved in drafting and negotiating mergers and acquisitions, venture capital financings, and commercial agreements. He prepares various documents including purchase agreements, assignment agreements, master services agreements, data protection addendums, and shareholder agreements. Drew also provides guidance on corporate restructurings, market standards in venture capital and private equity financings, and regulatory best practices.
Drew’s experience extends to due diligence in acquisitions, privacy, and security matters, ensuring clients are informed about potential risks. He has represented clients in de-SPAC processes and has experience in general commercial litigation.
Concentrations
•California privacy laws (CCPA/CPRA)
•Financial privacy (GLBA)
•Health care privacy (HIPAA, Washington MHMD)
•Insurance/financial regulations (NY DFS and NAIC cybersecurity rules)
•European Union and UK data protection (GDPR)
•Canadian privacy law (PIPEDA)
•Incident response
•Data breach notification
•Data protection agreements
•Website privacy policies
•Terms of service for websites
