2026 IAB Privacy Compliance Salon

Max Anderson is a seasoned product executive with a proven track record of bringing successful technology products to market in the consumer privacy, data management, and marketing space.

Prior to Ketch, Max was the Director of Product Management at Krux. After joining Salesforce as part of the Krux acquisition, Max ran data privacy and consumer identity products at Salesforce, including the rollout of their industry-leading GDPR solution set. Prior to Krux, Max was a Product Manager at IPG Mediabrands, where he was responsible for multiple successful advertising measurement products. Max holds a BS in Chinese Literature from the University of Colorado, where he graduated Phi Beta Kappa with honors.

Colleen is Head of Marketing at Ketch, a privacy technology company. She also hosts The Privacy Huddle, a podcast recently past its 100th episode, where she talks trends, headlines, and hot topics in data privacy with in-house counsel, DPOs, and other industry luminaries.

At Ketch, Colleen oversees marketing and partnerships, working closely with product and leadership to translate sophisticated permissioning software into practical application for people building and running privacy programs. She most recently led the launch of Iris, a patent-pending scanning algorithm to improve data collection visibility across website cookies, trackers, and tags. Colleen is passionate about the intersection of data control and revenue, helping teams see how good data practices can accelerate growth while reducing risk.

Taylor is a partner at BakerHostetler in the Digital Assets and Data Management group based in Orange County. Taylor has significant experience operating at the intersection of law, technology and business, with a keen focus on data privacy and ad tech. Taylor’s diverse strengths include coordinating and leading the implementation of global privacy programs; advising on compliance issues, negotiating agreements with vendors and business partners; and maintaining a deep knowledge of the ad tech ecosystem and related privacy issues. Taylor is adept at working across company divisions and is well-versed at distilling complex technological issues into understandable concepts for business leaders.

Aaron Burstein, a Partner in Kelley Drye’s Privacy and Information Security group, combines deep knowledge of digital advertising with government experience to provide practical counsel on privacy, data security, and consumer protection law. A former FTC attorney, Aaron provides insightful counsel to clients as they navigate compliance, transactions, and investigation in a rapidly changing regulatory environment.

Mayra is Senior Counsel for Global Privacy & Data Policy at Omnicom Media Group based in New York City. Before that, she was a Privacy Compliance Lead at MetLife’s Global Corporate Privacy Office. She also worked as a Senior Consultant at a New York City and Chicago consulting firm, providing privacy advice to multi-national organizations in the information technology and pharmaceutical industries. Mayra started her career in privacy in 2012 when she interned for the Department of International Law of the Organization of American States in Washington, D.C. She also worked for two of the most prominent law firms in Mexico where she advised large-scale companies on privacy law, bringing the European know-how to the region.


Mayra is admitted to practice law in the State of New York. She has an LL.M from the George Washington University Law School and an LL. B from the Monterrey Institute of Technology and Higher Education School of Law. She served as IAPP’s New York City Co-Chair for 2018-2020.

Ben is General Counsel and Chief Privacy Officer at Swoop, a leading provider of A.I.-driven omnichannel solutions dedicated to protecting consumer privacy. Ben’s background and expertise is in ad tech, advertising, privacy law and compliance, and complex data and technology licensing. Prior to joining Swoop, Ben served as Deputy General Counsel for Real Chemistry, and prior to that as Senior Counsel for Publicis Groupe Re:Sources, supporting companies under the Publicis Media division. Ben ensures that Swoop remains at the forefront of A.I. and digital audience engagement in a privacy enhancing and compliant way. Ben holds a J.D. from Boston College Law School and a B.A. from Virginia Commonwealth University.

Jasdeep Cheema (JD) is the Co-Founder of Privado, a privacy technology company he has been building since 2020. Privado helps privacy teams operationalize compliance through automated code scanning, web auditing, and Agentic Assessments.

Jason Cicchetti is Index Exchange’s general counsel and corporate secretary. He joined the company’s executive team in 2018, after serving as Index’s external counsel for over three years. Jason oversees all global legal matters, including corporate and board governance, commercial partnerships, intellectual property, litigation, and regulatory compliance, as well as the company’s Exchange Quality team.

Prior to joining Index Exchange, Jason was a partner at Loopstra Nixon LLP, specializing in corporate, commercial, and securities law. He advised multinational corporations across various sectors, including advertising and technology, on large-scale mergers and acquisitions, complex financing transactions, regulatory compliance affairs, and general corporate and commercial matters.

Jason holds a Bachelor of Business Administration with honors from the Schulich School of Business at York University and earned his Juris Doctor from Queen’s University Law School.

Richard Cohen is Assistant General Counsel, IAB. Prior to joining the IAB, Richard was the CPO, V.P. and Associate General Counsel at Foot Locker. Prior to this, Richard was Special Counsel at Kelley Drye and Counsel at IBM EMEA. Richard is a graduate of Harvard, Boston University Law School and University of Helsinki. In addition to his current role at IAB, Richard is an Adjunct Professor at NJIT where his focus is on Legal Issues in the Media and AI.

As Vice President, Chief Privacy Officer Michael is responsible for ensuring that Best Buy, including Best Buy Ads and Best Buy Health, has a comprehensive understanding and set of approaches to its collection, use, retention, and disclosure of personal and confidential business information in a manner that mitigates security risks, honors its privacy promises, and meets rapidly changing customer and regulatory expectations while helping to ensure that Best Buy successfully meets its purpose to enrich lives through technology.  In addition to the privacy program and privacy/cybersecurity legal-counsel team, he oversees data loss prevention, eDiscovery, data discovery & classification, and information & records management capabilities.   

Hershel S. Eisenberger is a senior privacy, data, and AI attorney and executive who helps global organizations innovate responsibly while protecting customer trust. He is currently Associate General Counsel and Global Head of Privacy & AI at Etsy, where he owns the company’s enterprise privacy program and leads the legal team covering privacy, data, and AI governance.

Hershel joined Etsy from The Coca-Cola Company, where he led global privacy, AI governance, and data protection across 200+ markets. Before Coca-Cola, he led Rivian’s privacy program and held senior privacy and public policy roles at Meta and Lyft. Earlier in his career, he served in the U.S. Department of Defense’s Office of the General Counsel and the U.S. House of Representatives’ Office of the Legislative Counsel.

He holds a J.D. from Harvard Law School and a B.A. from the University of Pennsylvania, and is a Certified Information Privacy Professional (CIPP/US). He serves on the Future of Privacy Forum’s Advisory Board. Outside of work, he spends most of his free time keeping up with his two young children.

Charlie Germano is an attorney and technologist with decades of experience spanning software engineering, cybersecurity, and technology leadership. His career includes hands-on software development, leading large software development and technology teams, and serving as a Chief Information Security Officer (CISO).

He currently serves as Counsel and Senior Technologist in the Children’s Advertising Review Unit (CARU) of BBB National Programs, where he leads CARU’s COPPA Safe Harbor program and advises on other initiatives involving children and teens. Charlie works with companies on the practical challenges of designing and operating digital products in an evolving privacy and regulatory environment.

Charlie also frequently contributes to media conversations on youth digital privacy, cybersecurity, emerging technologies, and the ways in which technology and regulation intersect.

A 25-year digital media pioneer Richy has led seven startups: three inside of big media companies, four outside. Richy now serves as Co-Founder and CEO of SafeGuard Privacy. He previously held executive roles at leading brands, agencies, and media companies. In his role as CEO/COO at Medialets, Richy pivoted & sold the company to WPP. Richy was on the founding team of CNN.com, the CEO/Founder of Phase2Media, a co-founder of IAB, and a co-founding board member of Breastcancer.org. Richy has also served at MTVN, Turner Broadcasting, and News Corp.

Daniel is Chair of the Data Strategy, Privacy & Security Group at Frankfurt Kurnit. Daniel advises on a wide range of privacy, security, and AI matters, including compliance with consumer, business, and HR datasets. His expertise spans from handling high-stakes regulatory enforcement actions to shaping the application of privacy laws, including one of the first public actions under the California Consumer Privacy Act (CCPA). The Privacy Law Section of the California Privacy Lawyers Association recently named him the 2025 “California Privacy Lawyer of the Year.”

Michael Hahn is Executive Vice President & General Counsel at IAB and IAB Tech Lab. Michael has responsibility for all legal matters, including the direction of legal strategy, privacy compliance, antitrust compliance, intellectual property rights issues, and general corporate matters. Michael is also responsible for serving as an advocate for the digital advertising industry on common legal issues affecting member companies.

Michael joined IAB and IAB Tech Lab from Lowenstein Sandler LLP where he served as Vice Chair of the firm’s Antitrust Practice Group. In that role, he provided clients with strategic counsel around competition, distribution and governance issues. In the area of litigation, Michael’s matters have included multiparty class action antitrust defense representation.

Michael served previously as Co-Chair of the New Jersey State Bar Association Antitrust Law Committee. He also previously served on the Editorial Advisory Board of Competition Law 360 and the Advisory Board of the American Bar Association Antitrust Section’s Civil Torts & RICO Committee. Michael frequently publishes on a range of legal and policy issues.

Michael earned his B.A. in History and Political Science from Rutgers University, M.P.P. from Georgetown University and J.D. for Georgetown University Law Center.

Nur-ul-Haq is SVP, Global Privacy and Kids’ Privacy & Online Safety Officer in the Privacy Team at Paramount. He advises on privacy and online safety globally, especially with respect to privacy and safety by design, consumer privacy rights, kids’ and teens’ privacy and online safety, advertising, and the intersection of AI and privacy. Prior to joining Paramount, Nur was Privacy Counsel at NBCUniversal and a staff attorney in the Federal Trade Commission’s Northeast Regional Office.

Andy Hepburn is a strategic leader and dealmaker with a reputation for delivering innovative, value-driven results to his clients. His experience includes: General Counsel, SafeGuard Privacy, Founder of NEOLAW, a boutique privacy and technology law firm, Certified Information Privacy Professional (CIPP/US) with boots-on-the-ground work in ad tech, Technology attorney with deep background in licensing and distribution strategies and deals, Broad experience as outside and in-house counsel. In-house roles include General Counsel for Liaison Technologies (supply-chain data management) and Sizmek (DSP/ad server), and Legal roles at Sony Mobile, EquaTerra (BPO outsourcing); META Group (IT consulting), and Georgia-Pacific (forest products).

Alysa Hutnik, Partner and Chair of Kelley Drye’s Privacy and Information Security practice, provides practical legal advice in all areas of privacy, data security, and advertising law, with a strong focus on adtech and the intersection of privacy and marketing practices. Alysa has a strong pulse on the ever-evolving privacy legal landscape, and frequently defends companies in privacy and advertising matters before the Federal Trade Commission (FTC) and state attorneys general. Alysa is ranked as a leading practitioner in the Privacy & Data Security area by Chambers USA, Chambers Global and Law360 and is a frequent speaker at conferences around the country.

Monika Jedrzejowska is the Chief Privacy Officer and Associate General Counsel for Hearst, a global diversified media, information and services company. Monika leads global privacy and data protection initiatives for the Hearst businesses, including in the media, information services, finance, healthcare and transportation markets. She is responsible for identifying, evaluating and managing risks associated with privacy and data practices as well as developing and implementing privacy strategies, including for digital and emerging technologies.

Andreas Kaltsounis is a recognized leader in privacy and cybersecurity, ranked by Chambers Global and Chambers USA. With over 25 years of legal and technical experience, Andreas advises on global privacy and cybersecurity compliance, guides organizations through major incidents, and defends clients in regulatory inquiries before the FTC, state attorneys general, the CPPA, and international authorities. He co-leads the firm’s Digital Risk Advisory and Cybersecurity team and frequently speaks on emerging privacy and security issues.

Soo Kang is Vice President, Legal and Chief Privacy Officer at Albertsons Companies, Inc., where he leads the company’s privacy, records management, and cybersecurity incident response programs across its retail, pharmacy, digital, and retail media businesses. He is responsible for developing and implementing enterprise privacy strategy, overseeing records management governance, and guiding the organization’s response to complex cybersecurity and data protection incidents.

In addition to his core responsibilities, Soo advises on data governance and artificial intelligence initiatives, helping the company responsibly leverage data and emerging technologies while maintaining strong privacy and compliance safeguards. Known for simplifying complex issues and building strong cross-functional partnerships, Soo focuses on creating practical solutions that enable innovation, strengthen consumer trust, and translate evolving regulatory requirements into effective business practices.

Jason Knapp is a practicing lawyer with over 15 years of experience in large law firms and in-house legal teams. He has broad experience in privacy, commercial contracts, M&A, internal investigations, and litigation. Prior to joining InMarket, Jason lived in Amsterdam and served as general counsel for a VC-backed marketing tech SaaS company, where he led an international team responsible for all legal and privacy matters. Jason lives in Seattle and is married with three children.

Peter leads the Advance’s global privacy and corporate and consumer compliance functions. He provides legal and strategic advice to senior executives and business leaders relating to U.S. and international data privacy and security issues; consumer marketing and subscriptions; compliance and business ethics; policy, government, and industry affairs; trade regulation, advertising, and promotions; disputes and litigations; and distribution and independent contractor matters.​

Advance is a diversified privately held company that operates a broad range of media, communications and technology businesses globally, including Condé Nast, Advance Local, American City Business Journals, Leaders Group, Stage Entertainment, Turnitin, and POP. Advance is also among the largest shareholders of Charter Communications, Warner Bros. Discovery and Reddit.

As BakerHostetler’s Los Angeles, San Francisco and Orange County Digital Assets and Data Management Leader and the Co-Leader of the Media and Telecommunications Industry team, Jennifer Mitchell leverages more than 15 years of legal, compliance and operational experience, much of it in-house, as she helps clients navigate the complex landscape of global and strategic privacy matters. She is the hiring partner at the Los Angeles office. Having most recently served in executive privacy leadership roles for two global Fortune 100 companies, Jennifer provides practical business solutions to maintaining compliance with evolving U.S. state privacy laws and to developing data-driven initiatives in compliance with the General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA) and California Consumer Privacy Act (CCPA). Jennifer counsels clients in a broad range of industries, including entertainment, media, telecommunications, and wellness, and also advises health care and medical device entities on compliance with HIPAA and U.S. state law requirements relating to consumer health data and sensitive personal information.

Dera Nevin is a data lawyer and expert with more than 20 years of experience addressing digital risk issues including privacy, data protection, information risk management, e-discovery and the application of emerging technologies to the delivery of legal services. Ms. Nevin specializes in applying artificial intelligence, automation and synthetic data strategies to complex client challenges.

Ms. Nevin works closely with corporate and law firm clients to establish litigation and regulatory readiness programs and benchmark and operationalize technology-forward data compliance frameworks. She is an expert across numerous areas of digital insights and risk management and is known for her early work in e-discovery. Specifically, Dera pioneered the use of novel forms of digital evidence within litigation and regulatory investigations and assisted with the design and use of technology to acquire, process and present that evidence. Ms. Nevin is widely regarded as a visionary and leader in the treatment of digital legal information during complex cross-border movement of sensitive data.

Ms. Nevin’s experience includes supporting global organizations across information governance, proactive privacy and data protection compliance, breach response, regulatory investigations, technology implementation, e-discovery and the development of litigation readiness programs. She has also facilitated privacy and data protection assessment programs and provided scoping frameworks for privacy assessments and audits.

Prior to joining FTI Technology, Ms. Nevin was the Data Policy and Strategy Officer, legal and compliance, at Blackstone, Inc., where she developed and oversaw global privacy, data protection, information risk management and data science compliance programs, including selection and implementation of privacy technology and data discovery technology. She also established due diligence policies and frameworks for M&A activity and portfolio company oversight. She has also practiced as a data lawyer at Baker & McKenzie and Proskauer Rose, as well as at additional financial institutions and law firms.

Ms. Nevin is a frequent industry speaker, writer and mentor.

Brian Perreault is a Senior Director and Associate General Counsel, Privacy at Comscore, Inc., a trusted currency for planning, transacting, and evaluating media across platforms. Brian earned his J.D. and LLM from University of New Hampshire School of Law, focusing on Intellectual Property, Commerce and Technology. He maintains the IAPP Certified Information Privacy Professional/United States (CIPP/US) certification.

Daniel B. Rosenzweig is the Founder & Principal Attorney at DBR Tech Law. He advises clients on legal and technical compliance with data privacy and AI laws, and counsels clients on industry mobile app store requirements, AdTech, and privacy-enhancing technologies (PETs).

Daniel’s legal practice is unique in that he develops and codes technical solutions to help serve as a bridge between legal, marketing, and technical teams, in addition to providing clients traditional legal services (e.g., conducting risk assessments, drafting disclosures, etc.). He excels at assisting organizations put the law into action by translating complex legal requirements into actionable technical implementations

Crystal Skelton is VP, Corporate Counsel at ZipRecruiter, where she leads the company’s privacy, AI governance, compliance, and enterprise risk management initiatives. She leads the Compliance Team at ZipRecruiter, and specializes in guiding the organization through complex regulatory shifts and establishing frameworks for responsible AI and data governance.

Steve Sullivan is Senior Director, Information Security at Walmart, where he leads a team monitoring tracking technologies and AI risk at enterprise scale. Over a 20+ year career, including leadership roles at Microsoft, IAB, Index Exchange, and HUMAN Security, he’s built a reputation for translating dense legal and technical requirements into decisions business leaders can actually act on. For the past 18 months, that’s meant a close look at generative AI’s i

Emily S. Tabatabai is a partner and founding member of Orrick’s Cyber, Privacy & Data Innovation Group. Emily vigorously represents clients in regulatory enforcement matters before the FTC, State AGs, Congressional committees and other regulatory agencies and groups, including in matters related to telematics and location data, children’s privacy, online safety, deceptive advertising, adtech and compliance with state privacy laws. She provides strategic counseling and advice on wide range of privacy, consumer protection and online safety matters to clients across industries and is a frequent speaker on data privacy matters, with a particular focus on children’s privacy, student data and EdTech and online safety laws for kids and teens.

Andrew L. Tobel joins the IAB as Assistant General Counsel, specializing in the privacy, technology and digital advertising space. He is passionate about helping advertisers and their partners navigate complex legal landscapes by translating intricate legal concepts into clear, actionable strategies. Andrew’s expertise bridges the gap between technological requirements and legal compliance, empowering teams to innovate and grow.

Prior to IAB, Andrew was privacy counsel to Albertsons retail media network and product teams, held his own law firm, and served in numerous staff augmentation role including acting as global head of privacy and deputy privacy officer. He enjoys running, having a good laugh with friends and family, focusing on his golf swing, and serving his community through local outreach.