Dana Holmstrand

Dana regularly counsels clients on matters related to expanding state privacy laws, including the California Consumer Privacy Act (CCPA) and Illinois Biometric Information Privacy Act (BIPA), as well as the European Union's General Data Protection Regulation (GDPR) and the Gramm-Leach-Bliley Act (GLBA).

Dana also offers guidance on Federal Trade Commission (FTC) requirements, updates privacy representations, and ensures that clients are informed of industry best practices to avoid risk and maximize success. She has also worked on complex multistate settlements and government enforcement actions.

During law school, Dana served as a student advocate in the Federal Legislation Clinic, where she supported a privacy and technology think tank by surveying the landscape of enacted and proposed laws related to face recognition technology, critiqued bills, and prepared staff for related lobbying in several states. Previously, Dana served as an IT strategy consultant at a leading audit, tax, and advisory services firm, where she assisted in translating strategic planning goals into technical and fiscal requirements for the U.S. Department of Veterans Affairs (VA). This experience allows her to translate complicated IT requirements into simpler terms that people can understand, no matter their industry.