Jarno Vanto

• Counseled an insurance company in connection with an industry regulator cybersecurity investigation.
• Advised several clients on state attorney general privacy civil investigations.
• Advised an AI model developer on AI cybersecurity.
• Counseled a financial institution in connection with a financial industry regulator cybersecurity investigation.
• Counseled a financial institution on their NYDFS Part 500 compliance.
• Counseled a global software company on their data mapping and privacy impact assessments.
• Counseled Fortune 100 energy company on privacy & cybersecurity compliance.
• Advised an automotive company on AI governance.
• Counseled leading global company on response to cybersecurity incident arising from MOVEit security vulnerability.
• Counseled a real estate fund on their privacy and cybersecurity compliance.
• Advises multiple multinationals on both inbound and outbound transfers of personal information to and from China.
• Advised a global data service provider on the creation and implementation of a cross-border data transfer framework.
• Drafted a comprehensive information security program and associated policies for a crypto payment platform.
• Advised a global data service provider on a comprehensive privacy compliance program.
• Advised a client on FTC and European regulator investigations, which were subsequently closed.
• Advised a location technology company on their GDPR and CCPA compliance.
• Advised a mobile advertising platform on their CCPA compliance.
• Advised a clinical trial technology platform on their global privacy compliance.
• Advised a field service management software company on their GDPR compliance.
• Advised a mobile gaming company on their GDPR and CCPA compliance.
• Advised a sensor technology company on GDPR compliance.
• Advised a mobile advertising technology company on a consent management platform development.
• Advised a game streaming platform on privacy compliance.
• Advised a fashion online retail technology company on GDPR and CCPA compliance.
• Advised a product data platform company on GDPR compliance.
• Advised an online and mobile fraud detection platform on GDPR and CCPA compliance.
• Advised a globally operating fabric materials company on international transfers of personal data.
• Advised a globally operating industrial conglomerate on international transfers of personal data.
• Advised a location technology company on building a global privacy program.
• Advised a health care app provider on HIPAA compliance.
• Advised a communications app developer on global privacy compliance.
• Advised an international mobile gaming company on international transfers of personal data.
• Performed privacy due diligence of U.S. target companies for a European venture capital fund.
• Advised an advertising technology company on demand and supply side data licensing agreements, SDK licensing and development.
• Advised industrial equipment manufacturers on machine-generated data rights, data licensing, and data strategy development.
• Advised a sensor technology manufacturer on data rights and licensing.
• Advised a global vehicle manufacturer on connected vehicle data rights and licensing.
• Advised an indoor positioning company in its licensing and Platform-as-a-Service deals with Yahoo! Japan and a Korean technology conglomerate.
• Advised a location data platform vendor on their Platform-as-a-Service agreement with several global telcos.

Jarno Vanto is a Partner in our Data, Privacy and Security practice. Due to his extensive international regulatory experience, he is frequently called upon by his clients to provide a differentiated global perspective regarding privacy, cybersecurity, artificial intelligence, and technology related matters.

Jarno partners with his clients on key business issues spanning privacy and cybersecurity regulatory compliance and investigations, AI regulations, AI governance, complex cross-border technology and data transactions, data and software licensing, and other technology and data transfer agreements. He counsels clients regarding global privacy and cybersecurity compliance programs, AI governance, and IP management. His experience spans the full scope of privacy and artificial intelligence laws, including, not by way of limitation, GDPR, CCPA, the EU AI Act, and emerging U.S. state privacy and AI laws. He provides privacy compliance counseling and AI governance counseling to companies that provide software-as-a-service, data-as-a-service, automotive and connected vehicle technologies, mobile applications, location-based technologies, financial services, cloud technologies, HR services, and healthcare technologies. He also regularly advises global corporations on the legal issues they encounter operating in the U.S. market.

Jarno frequently advises private equity funds and their portfolio companies on privacy due diligence and transactions involving companies whose core business is regulated data. Multinationals rely on Jarno’s expertise in connection with group cross-border data transfer frameworks.

Jarno holds CIPP/US and CIPP/E certifications.