Ryan Burns

Ryan Burns, CIPP/US, is a data privacy and security attorney who advises cloud service providers and technology companies on navigating international, federal, and state cybersecurity and data privacy frameworks. His practice focuses on cybersecurity incident response, including breach assessment and notification obligations under the Federal Risk and Authorization Management Program (FedRAMP), the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations, the European Union's NIS2 Directive, and other cybersecurity frameworks and regimes.

Ryan also counsels clients on broader information security and incident response matters, including the development of written incident response plans and policies. Additionally, he advises on contractual notification and security requirements in commercial and government-facing agreements.

Prior to transitioning to privacy and security law, Ryan's practice focused on corporate mergers and acquisitions.