Olufunmilayo Owolabi

Olufunmilayo Owolabi's primary practice areas include Data Privacy, Cybersecurity Law, and Artificial Intelligence (AI). In these fields, Olufunmilayo brings extensive advisory experience, having counseled AI start-ups, multinational corporations, and technology companies on complex global data governance and regulatory compliance matters. Her client work spans a broad range of industries, including real estate technology, telecommunications, pharmaceuticals, retail, artificial intelligence, gaming, and federal government agencies. Olufunmilayo provides comprehensive legal services across the full lifecycle of privacy and cybersecurity compliance, including privacy impact assessments, data protection impact assessments, incident response planning, and breach notification obligations. She advises clients on compliance with major global privacy frameworks — including GDPR, CCPA/CPRA, HIPAA, and PIPEDA — and provides counsel to organizations on cross-border data transfer mechanisms such as Standard Contractual Clauses and transfer impact assessments. In parallel, she supports the development of enterprise-wide governance structures, privacy-by-design frameworks, and risk-based compliance programs tailored to each organization's regulatory environment. Olufunmilayo has several privacy and security certifications, including the CISSP, AIGP, CIPP/US, CIPP/E, CIPM, CDPSE, CIPT.

Career Highlights

  • Advised Alexion Pharmaceuticals in the development of a pharmaceutical-grade privacy compliance program, encompassing the drafting of informed consent documentation, patient data governance protocols, and regulatory compliance advisory under HIPAA and the Washington My Health MY Data Act
  • Advised Digital Realty in the conduct of comprehensive vendor due diligence and the negotiation of data protection provisions in customer-facing agreements across multiple jurisdictions
  • Advised Walmart in the design and operationalization of a comprehensive cookie compliance program, including the implementation of consent management frameworks and alignment with applicable U.S. state privacy regulations
  • Advised Electronic Arts in the development and maintenance of its Records of Processing Activities (RoPA), the execution of enterprise-wide data mapping exercises, and the drafting of internal privacy policies and governance documentation
  • Supported the U.S. Department of Veterans Affairs in the conduct of Privacy Impact Assessments and the development of privacy governance documentation for federal information systems
  • Supported the U.S. Department of Agriculture in legal research and regulatory compliance support concerning federal privacy statutes, data retention obligations, and information disclosure requirements