Kory Pratt

About Kory Pratt

Seasoned IT Security and Privacy Leader with over 15 years of experience transforming compliance-driven programs into strategic business enablers. Certified DSPM Architect who\'s passionate about embedding privacy by design, assisted in guiding global organizations through the evolving landscape of GDPR, CCPA, HIPAA, PCI DSS and emerging AI regulations like the EU AI Act. Helped implement scalable frameworks to protect sensitive data across cloud, on-premises, and hybrid environments. Skilled in Purview, Data Loss Prevention/DLP, Generative AI / Machine Learning, Experience building or advising on AI/ML privacy practices, Data Security Posture Management (DSPM), DSAR, Group Policy, Governance, Risk & Compliance, Gap Analysis, Client Relationship Building, Root Cause Analysis, Problem Management, Incident Management, Asset Management, Roll-Outs, Vendor Relations, Root Cause Analysis, ITIL, SLA Adherence. Experienced in, MS Defender, Symantec DLP. Multi Factor Authentication (MFA), Azure Cloud Security, Frameworks – NIST, MITRE, ISO27001, HIPAA, GDPR, PCI DSS, HITRUST, LGPD, PIPEDA, CCPA/CPRA, NYDFS, Data Subject Access Requests.

Experience

1. Sr Manager, Data Privacy Tooling Lead

   Digital Realty

   Jan 2025 — Present · Dallas-Fort Worth, TX, US

   Responsible for driving the implementation and maturation of the data protection program across the organization. Work closely with cross-functional teams to ensure compliance with global privacy regulations, including GDPR, CCPA/CRPA, LGPD, PIPEDA, POPIA, AIPA, PIPA, and more.Key responsibilities include leveraging Microsoft Purview to create and implement effective sensitivity labels, build / advise on AI/ML privacy practices and Data Loss Prevention (DLP) policies within the M365 environment. Involved in privacy risk assessments for new and existing products, ensuring proper mitigation strategies are in place. Collaborate with IT, Cybersecurity, Compliance, and other business units to embed privacy requirements into business processes and projects. Provide ongoing support for privacy policy development, awareness training, and data subject requests, while maintaining up-to-date knowledge of evolving global privacy laws. Additionally, I work to integrate privacy by design into business processes and ensure seamless communication across the organization to maintain the confidentiality and security of consumer, employee, and company data.

Education

• Dillard University - New Orleans

  Kinesiology