Ryan J. Perry

Privacy and data security attorney Ryan Perry is a Certified Information Privacy Professional/United States (CIPP/US) and a member of the Firm’s Privacy & Data Security Practice Group as well as its Licensing & Commercial Contracts Practice Group. Ryan counsels companies with compliance under various privacy and data security regulatory regimes, leads companies through data protection issues in corporate transactions, advises businesses in responding to security incidents and data breaches, and negotiates commercial contracts (particularly those with complex data sharing arrangements). Ryan advises business clients spanning a variety of different industries at all stages of development.

His regulatory compliance practice involves counseling businesses in crafting bespoke compliance strategies with: the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA); the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Utah Consumer Privacy Act (UCPA), the Connecticut Data Privacy Act (CTDPA), and other similar laws in other states; the General Data Protection Regulation (GDPR); the EU-U.S. Data Privacy Framework; the Telephone Consumer Privacy Act (TCPA) and Telemarketing Sales Rule (TSR); the CAN-SPAM Act; the Federal Trade Commission Act (FTC Act) and state analogs; the Graham-Leach-Bliley Act (GLBA); the Children’s Online Privacy Protection Act (COPPA); Washington’s My Health My Data Act (MHMD Act), as well as similar laws in Nevada and Connecticut; the Massachusetts data protection regulations (201 CMR 17); the New York SHIELD Act; and other privacy and data security laws.

As a privacy and data security attorney, Ryan serves as the data protection specialist on corporate transactions, such as mergers and acquisitions and venture and private equity financing transactions. This aspect of his practice involves the review, drafting, and negotiation of privacy and security representations and warranties, as well as guiding companies through the privacy due diligence process.

He is also a trusted advisor to businesses in responding to security incidents and data breaches, helping clients to direct their investigations, to determine what remediation obligations are required by law and contract, and to notify individuals and regulators where necessary. Ryan also counsels businesses in responding to data subjects seeking to exercise their rights under various privacy laws.

Ryan is actively involved in writing and negotiating commercial contracts from all perspectives, particularly those with a strong data focus, including data sharing agreements, data processing agreements, software licensing agreements,  Software as a Service (SaaS) agreements.

Prior to joining Morse, Ryan practiced law in the Boston office of Ropes & Gray LLP. During law school, Ryan served as a student attorney at the Boston College Legal Assistance Bureau, where he counseled local non-profits and low income start-ups.