Sinan Pismisoglu

About Sinan Pismisoglu

I am a senior global data privacy counsel. My practice focuses on supporting our global clients by identifying, evaluating, and managing global data privacy and security risks and compliance issues and navigating them through data breach response and associated regulatory investigations and enforcement proceedings. My experience includes conducting incident response preparedness and regulatory and operational risk management associated with data collection, data processing, cross-border transfer, and data analytics. I regularly advise clients on the privacy, data security, and data ownership provisions of commercial and technology-related contracts and SLA negotiations on IaaS, SaaS, and SIaaS platforms. While I primarily focus on data privacy, security, and information management matters, I have a special interest in cybersecurity issues arising from using fourth-generation SCADA systems in critical infrastructure. I participate in the Firm’s Smart Cities Think Tank, contributing to discussions on smart grid, IoT, AI, IoT-based SCADA, the security of critical infrastructure, and supply chain management in industrial control systems.

Experience

1. Privacy Counsel

   Bradley Arant Boult Cummings LLP

   Feb 2023 — Present · Houston, TX, US

   Advise clients on product development, privacy, and security compliance, AI ethics, SaaS contracting, Big Data, data licensing and ownership, supply chain and vendor management, and incident preparedness and response. Supervise privacy and security by design processes in software development for consumer-facing web and mobile applications, IoT software, and client-side software. Solve complex cybersecurity, information security, compliance, and operational issues beginning with early planning and prevention through detection and remediation through crisis management. Collaborate with engineering teams to create compliance-integrated risk management frameworks, governance, and ethics programs for emerging technologies such as AI/ML, cybersecurity, IoT, and cloud models.Work with requirement engineers and product design teams to determine the privacy risks associated with product use and the mitigating effects of technical privacy controls. Provide privacy compliance counseling for data security software integration, log monitoring, insider protection, DevOps, marketing, and data governance operations.In product counseling, I define privacy as a customer demand rather than a compliance risk, and I collaborate with privacy engineers to improve business processes by applying technical privacy controls.

Education

• Ankara University

  JD Equivalent, Law

  1994 — 1998

• University of Warwick

  LL.M, Law

  1998 — 1999

• University of Houston Law Center

  LL.M, Law

  2008 — 2010