Overview

Cheryl is an Associate in McDonald Hopkins’ Litigation Department and a part of the firm’s national Data Privacy and Cybersecurity Practice Group. Her practice centers on incident response and cyber preparedness, counseling clients on pre-breach risk management and guiding them through ransomware attacks, business e-mail compromises, and inadvertent disclosures in addition to her work advising on data privacy and cyber security compliance. She brings a strong combination of privacy, cybersecurity, and litigation experience to her practice.

Prior to joining McDonald Hopkins, Cheryl advised organizations on privacy and cybersecurity compliance initiatives, including Privacy Impact Assessments, risk assessments, cross-border data considerations, and policy development, translating complex regulatory requirements into practical, business-oriented solutions.

Cheryl previously served on the Research and Insights Team at the International Association of Privacy Professionals (IAPP), where she authored practitioner-focused guidance on global privacy, cybersecurity, and AI regulations and helped develop compliance resources addressing incident notification, cross-border data transfers, and enforcement trends. Her background also includes extensive courtroom and trial experience from her prior litigation practice, as well as a clerkship with Maine’s highest appellate court.

Cheryl is accredited by the IAPP as a Certified Information Privacy Professional for the United States (CIPP/US), Europe (CIPP/E), and as a Certified Information Privacy Manager (CIPM).  Since her gubernatorial appointment in 2022, she has served on a legislative advisory committee addressing the status, issues, and needs of Maine’s Freedom of Access laws.

Cheryl earned her Juris Doctor, magna cum laude, and a Certificate in Information Privacy Law, with distinction, from the University of Maine School of Law and a Bachelor of Arts, cum laude, from Syracuse University.

Credentials

Education

University of Maine School of Law

Syracuse University

Admissions – Court

Admissions – State

Professional & Civic

Professional Activities

Maine’s Right to Know Advisory Committee (Sept. 2022- Present)

News & Insights

External News & Publications

US State Data Breach Notification Chart | IAPP (March 2026)

Cybersecurity Law Key Terms | IAPP (12 January 2026)

EU Digital Laws Report 2025 | IAPP (25 September 2025)

10 tips to prepare for the EU Cyber Resilience Act | IAPP (11 September 2025)

EU Cyber Resilience Act: 101 | IAPP (11 September 2025)

Examining Western cyber policy reactions to China's rise in the digital age | IAPP (18 August 2025)

Data brokers, beware: Distinguishing PADFAA from the DOJ's DSP | IAPP (15 August 2025)

Whose risk is it anyway? How positions and perspectives inform digital risks | IAPP (11 August 2025)

Data Security Program Cheat Sheet | IAPP (3 July 2025)

Navigate: Digital Risk Index 2025 | IAPP (18 June 2025)

The final days of grace: Preparing for the U.S. sensitive data rule | IAPP (09 June 2025)

US Data Privacy Litigation: Litigating accountability through shareholder action | IAPP (14 April 2025)

US Data Privacy Litigation: Breach of contract and warranties litigation | IAPP (10 March 2025)

How Privacy Pros Are Navigating the Gordian Knot of Digital Law - Infosecurity Magazine, (31 January, 2025)

Cybersecurity Law Basics | IAPP (22 January 2025)

At-a-Glance: Privacy Governance Report 2024 | IAPP (9 December 2024)

Privacy Governance Report 2024 | IAPP (12 November 2024)

The Global Digital Compact: Uniting nations on digital governance | IAPP (11 November 2024)

Precision nutrition and biometric privacy in health tech | IAPP (13 August 2024)

Private Rights of Action in US Privacy Legislation | IAPP (10 June 2024)

Enacted Federal Statutes with PRA | IAPP (13 May 2024)

European Strategy for Data Overview | IAPP (25 July 2022)

50 years and still kicking: An examination of FIPPs in modern regulation | IAPP – (25 May 2021)

US State Data Breach Notification Chart | IAPP (1 March 2021)

Events

Speaking Engagements

Speaker, Practice State Privacy Law: Rules of Professional Conduct (Ethics CLE) - June 6, 2025 – University of Maine School of Law – Privacy in Practice Conference

Speaker, Digital Threats and Innovation Opportunities: U.S. Priorities and Challenges - May 31, 2024 – University of Maine School of Law – Privacy in Practice Conference

Jump to Page

McDonald Hopkins uses cookies on our website to enhance user experience and analyze website traffic. Third parties may also use cookies in connection with our website for social media, advertising and analytics and other purposes. By continuing to browse our website, you agree to our use of cookies as detailed in our updated Privacy Policy and our Terms of Use.