Gretchen A. Ramos

Ramos is a shareholder and the global co-chair of Greenberg Traurig’s data, privacy and cybersecurity practice with a focus on information management and all aspects of California Consumer Privacy Act and the European Union’s General Data Protection Regulation compliance. Clients include 23andMe Inc., Coinbase Inc., Lever and Castlight Health Inc.

Her accomplishments include her proficiency as a black belt in karate and her status as a teacher of traditional Korean swordsmanship. “Tumbling and cartwheels with the sword,” she said, describing the moves she both practices and helps others learn. “The more you do it, the more fun it is. I call it mental dry-cleaning.”

Martial arts aside, Ramos serves as primary privacy and cybersecurity counsel to the Sunnyvale-based genetic testing company 23andMe Inc., an enterprise currently valued at $2.5 billion that operates globally. She advises on the application and compliance obligations of the CCPA and additional privacy legislation pending in the U.S. and internationally. Her advice concerns the company’s public-facing website materials, its online privacy policy, terms of service, account creation flows and other features to account for changes in their services.

The work involves guidance on cross-border transfer mechanisms in light of the European Union’s recent Court of Justice decision known as Schrems II that found invalid the EU-U.S. Privacy Shield. Ramos is charged with the review of various data protection and other contract provisions relating to data sharing, use and ownership; she also provides guidance on addressing individual rights requests and assisting in structuring breach notification procedures and testing them. Invariably, new data protection laws arise in other countries where 23andMe sells kits; in California, the voter-approved Proposition 24, the Consumer Personal Information Law and Agency Initiative, adds new complexities to privacy protections.

Ramos advises AllStripes Research Inc., formerly known as RDMD, a San Francisco-based company focused on investigating rare diseases. “It’s problem solving and working with research institutions to help people all around the world,” she said. “It’s fantastic work. It’s among the tech companies in the health space with very sensitive information. A lot of issues pop up. You don’t want that stuff accessible.”

Her work involves novel issues that regulators are only beginning to address. “In the privacy realm, there’s so much uncertainty,” Ramos said. “India and Brazil have new laws. But it can be fun to draw insights from other components of business goals and growth cycles. I’m risk-averse as an attorney guiding clients through the tough patchwork of compliance issues.”

— John Roemer