Darcy Black advises clients across industries on privacy, cybersecurity, and technology matters, including cyber incident response, privacy compliance, information governance, transaction diligence, and emerging issues involving artificial intelligence. She regularly guides organizations through cybersecurity incidents, helping clients assess legal obligations, coordinate forensic investigations, prepare regulatory notifications, and manage communications with regulators and other stakeholders.

Darcy also advises clients on compliance with U.S. and international privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Illinois Biometric Information Privacy Act (BIPA), the Children’s Online Privacy Protection Act (COPPA), and emerging artificial intelligence laws and regulations, including the Colorado AI Act and California’s Automated Decision-Making Technology (ADMT) regulations. She also helps clients develop and implement privacy compliance programs, including privacy notices, cookie disclosures, vendor and data processing agreements, and incident response plans. In addition, she supports clients on privacy and cybersecurity diligence for mergers and acquisitions.

Darcy earned her J.D. from Boston University School of Law, where she was a member of the Lawyers in Technology and Business Law Society.

Before law school, Darcy served as a Digital Assurance and Transparency associate at PricewaterhouseCoopers, focusing on information security and data management for System and Organization Controls reports. She earned her B.S. summa cum laude in business administration from Boston University Questrom School of Business, where she participated in the Questrom Honors Program.