Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

DCP+ Podcast Episode 5: Georgina Merhom on How Quality Data Can Transform Financial Services, Part 2

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

In this episode of our Data, Cyber + Privacy PLUS podcast, hosts Kaylee Cox Bankston and Boris Segalis continue their...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

DCP+ Podcast Episode 5: Georgina Merhom on How Quality Data Can Transform Financial Services, Part 2

Sign Up

Kaylee Cox Bankston is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. She advises clients across all industries on complex cybersecurity, privacy, and data matters, including cybersecurity investigations and breach preparation, corporate governance and risk management, regulatory investigations, litigation and class action defense, and other emerging industry issues, such as the use and impacts of artificial intelligence (AI). Kaylee was recognized by The Legal 500 US for her work in cyber law (including data privacy and data protection) in 2023 and 2025. Kaylee is also a co-author of The International Handbook of AI Law: A Guide to Understanding and Resolving the Legal Challenges of Artificial Intelligence.<ul><li>Cybersecurity Investigations and Incident Response Preparedness: Kaylee has extensive experience leading clients in investigations of sophisticated cyberattacks and security breaches conducted by high-profile threat actor groups, including ransomware, data extortion events, and business email compromises. She also counsels clients on incident response programs and preparedness, including developing and conducting cybersecurity simulations and tabletop exercises, preparing clients for security assessments, audits, and testing, and advising on post-assessment implementation and risk mitigation strategies. Kaylee advises clients on cybersecurity information and intelligence sharing, data access requests, and related national security matters.</li><li>Regulatory Investigations and Litigation: Kaylee has substantial experience representing clients in privacy and security investigations and related regulatory actions. She has represented companies in cybersecurity and privacy matters before U.S. and international regulators, including the U.S. Federal Trade Commission (FTC), the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services, Office of Civil Rights (HHS OCR), New York Department of Financial Services (NYDFS), and state attorneys general, and in litigation matters in various U.S. federal and state courts.</li><li>Compliance, Corporate Governance, and Public Companies Counseling: Kaylee has counseled numerous companies on how to navigate and comply with the new DOJ “Bulk Data” regulations, implementing Executive Order 14117. She has advised clients on the recent SEC Cybersecurity Disclosure Rules, including counseling on disclosure obligations for material cybersecurity incidents and developing annual SEC cybersecurity disclosures for publicly traded companies. Kaylee also counsels executives and boards of directors on cybersecurity and privacy corporate governance and risk management matters and regularly advises clients on the development of cybersecurity and privacy programs and compliance with other regulatory requirements and standards, such as the NYDFS Part 500 cybersecurity requirements, the FTC Safeguards Rule, the FTC Act, the California Consumer Privacy Act (CCPA) and state data privacy laws, the Illinois Biometric Information Privacy Act (BIPA), the Children’s Online Privacy Protection Act (COPPA), the Health Insurance Portability and Accountability Act (HIPAA), the Family Educational Rights and Privacy Act (FERPA), the Gramm-Leach-Bliley Act (GLBA), and the Payment Card Industry Data Security Standard (PCI DSS).</li><li>Corporate Transactions and Vendor Management: Kaylee counsels clients on vendor management programs, including developing security and privacy contracting frameworks and negotiating data protection agreements. Kaylee also advises clients on privacy and security diligence matters in connection with corporate transactions.</li></ul>Kaylee is an adjunct professor at Georgetown University Law Center, where she teaches a cybersecurity course. Kaylee is a Certified Information Privacy Professional (CIPP) through the International Association of Privacy Professionals. She previously served on the Center for a New American Security, Technology Policy Lab Working Group for Data Privacy and the Bar Association of the District of Columbia Board of Directors and National Security Steering Committee. She is also a member of Women in CyberSecurity (WiCyS).

Kaylee Bankston

Partner

Boris Segalis is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. For over a dozen years, he has counseled clients on privacy and cybersecurity issues in the context of strategic product advice, corporate transactions, and regulatory investigations.Boris regularly advises clients on the development and implementation of data-driven products and services, on global privacy and cybersecurity compliance, and on handling cyber incidents affecting companies and users globally. Boris also regularly defends companies in U.S. federal, state, and global privacy and cybersecurity investigations, including representing clients in front of the Federal Trade Commission (FTC), the New York and California attorneys general, and foreign regulators.Boris’s practice focuses on advising clients on the requirements of a variety of U.S. privacy and cybersecurity laws, including the California Privacy Rights Act (CCPA/CPRA) and other U.S. state privacy laws; state cybersecurity requirements such as the New York State Department of Financial Services (NYDFS)’s Cybersecurity Regulation; the Children’s Online Privacy Protection Act (COPPA); the Family Educational Rights and Privacy Act (FERPA); CAN-SPAM; NIST’s Cybersecurity Framework (CFS); the Telephone Consumer Protection Act (TCPA); and the Video Privacy Protection Act (VPPA). Boris regularly advises financial institutions and Fintech companies on the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), and the Payment Card Industry Data Security Standard (PCI DSS). Boris also has experience advising companies on privacy concerns stemming from the Illinois Biometric Information Privacy Act (BIPA) and other biometric data requirements. Boris has a strong command of global privacy and cybersecurity laws and advises companies on regulations such as the General Data Protection Regulation (GDPR), the EU-U.S. Data Privacy Framework, and the EU’s ePrivacy Directive.Boris counsels clients ranging from emerging to late-stage to public companies across industries, including technology, data brokerage, AI, financial services and Fintech, crypto, life sciences, consumer services, e-commerce, AdTech, media, and others. For seven consecutive years, Boris has been individually recognized by Chambers USA in the Privacy & Data Security category and is recognized by Chambers Global for Privacy & Data Security – USA. He has also been recognized by The Legal 500 as a leading lawyer in cyber law (including data privacy and data protection). Crain’s New York Business has previously included him in its 40 Under 40 list, and New York Metro has recognized Boris as both a Super Lawyer and a Rising Star.Boris is a Certified Information Privacy Professional (CIPP/US) through the International Association of Privacy Professionals (IAPP), has previously served as co-chair of NYC IAPP KnowledgeNet, and served on the IAPP’s Research Board. Boris currently serves as one of the leaders of the UJA Privacy and Cybersecurity Group. Boris also is an adjunct professor at Vanderbilt University School of Law, where he co-teaches a class on the law of data as an asset.

Boris Segalis

Artificial Intelligence (AI)

Fintech

Data, Cyber + Privacy