About the IAPP

Cameron Shilling is an attorney at McLane Middleton where he serves as Chair of the firm’s Cybersecurity and Practice Group. As part of his practice, Cameron creates and implements privacy policies, terms of use agreements, information use and social media policies. He advises clients about workplace privacy, social media, and consumer privacy, and handles data privacy claims asserted against companies. He has dealt with these issues under numerous applicable laws, including the Child Online Privacy Protection Act, United States and Canadian CAN-SPAM and anti-spam laws, Electronic Communications Privacy Act, Stored Communications Act, Computer Fraud and Abuse Act, Federal Trade Commission Act, Massachusetts privacy act, California Online Privacy Protection Art, state wiretap laws, and a variety of other state and federal privacy laws.

Cameron also has a breadth of experience in data security. He has managed numerous data security audits; prepared and implemented written security policies; trained executives, managers, and employees in data security; audited, prepared and implemented data security agreements with vendors and business associates, addressing a wide variety of day-to-day security issues; and investigated and remediated many security breaches. Cameron has dealt with these issues under a range of state and federal laws, including the Gramm-Leach-Bliley Act, Health Insurance Portability and Accountability Act, Health Information Technology for Economic and Clinical Health Act, Securities and Exchange Commission regulations, Fair Credit Reporting Act, Fair and Accurate Credit Transactions Act, the Massachusetts and California data security regulations, and a number of other state data security and breach notification laws.