Mark Johnson brings over 25 years of experience in both private practice and in-house to his work advising companies of all sizes on a wide range of privacy matters, including issues relating to the CCPA, GDPR, and other privacy laws; artificial intelligence (AI) compliance and governance; and other regulatory compliance matters. Mark regularly drafts both external and internal privacy policies and related training materials; drafts and negotiates data processing agreements and data transfer arrangements; advises on personal data processing issues for clinical trials; and assists clients with their data breach notification and mitigation efforts.

In addition to his privacy and compliance work, Mark negotiates and drafts a variety of commercial agreements for his clients (e.g., NDAs, consulting and professional services agreements, Master Services agreements, SaaS agreements, Reseller agreements, Advertising/Publisher/Agency agreements). He also has significant experience representing exempt organizations, including 501(c)(3) charitable organizations and 501(c)(6) industry trade associations, and has worked closely with numerous federal regulatory agencies (FCC, DOT, DOC, and Congress).