Kristen N. Bertch

Kristen Bertch, CIPP/US, leverages her technical experience and knowledge of the data security and privacy legal landscape to help clients across a spectrum of industries on cybersecurity and privacy issues and related regulatory compliance matters. Kristen advises clients on complex and cutting-edge technologies used for the collection, processing, and storage of data.

As part of the Privacy and Security team, Kristen advises clients on matters related to responding to data security incidents, compliance with security standards, HIPAA Security Rule compliance, drafting security policies, and assessing data security compliance obligations.

She advises clients on security standards including FedRAMP, StateRAMP, HITRUST, and ISO 27001. Her practice includes discussing clients' current systems and security posture and drafting policies and procedures to provide appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity and security of information.

Kristen also assists clients with data-security incidents, including incidents spanning multiple states and involving multiple types of data such as personal information, protected health information, and customer proprietary network information.

Kristen works with clients to assess their business and suggest next steps to improve their security posture, including compliance with HIPAA, the GLBA Safeguards Rule, state law security requirements such as Massachusetts' WISP requirement, and data retention and destruction policies.