Arlyn Upshaw advises clients on emerging legal developments related to data privacy, security, and transportation policy. Arlyn counsels companies on compliance with evolving multijurisdictional privacy laws, including the California Consumer Privacy Act (CCPA) and other state consumer privacy laws, the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and the General Data Protection Regulation (GDPR). Arlyn also represents developers of autonomous and connected vehicle technologies, providing guidance on regulatory developments and advocating on behalf of clients to advance policy objectives.
In her privacy compliance work, Arlyn evaluates clients’ practices against novel legal requirements and provides business-oriented solutions to diverse challenges. Staying abreast of the latest developments, she is able to offer clients creative risk-based advice tailored to their individual needs. In addition to advising on comprehensive consumer privacy laws, Arlyn has experience in areas such as children’s privacy, student privacy, adtech services, and transportation technologies.
In the connected mobility space, Arlyn engages with policymakers to develop legislative and regulatory frameworks governing autonomous vehicles (AVs). She has testified before state legislatures and regularly advocates on behalf of clients in the AV industry to advance state, federal, and international regulatory priorities. Leveraging her robust policy experience, she also helps clients navigate emerging legal developments by counseling on state AV frameworks and assessing novel use cases under traditional transportation law.