Darren J. Abernethy is a data privacy, advertising technology and artificial intelligence (AI) attorney with nearly two decades of legal experience at Am Law 100 law firms in Washington, D.C. and San Francisco and in-house at a leading privacy technology vendor. He advises clients on matters related to data-driven marketing, privacy law compliance, regulatory investigations, cross-border data transfers, privacy policy development and technology contracting, and privacy and data security considerations in M&A.
Darren frequently works with legal, marketing, product, information security, and engineering teams to translate emerging legal requirements into practical technical and operational controls. His experience encompasses websites, mobile applications, connected television, advertising and analytics technologies, AI-enabled products, consent management, data licensing, and the collection and use of sensitive personal information.
Darren has served on the International Association of Privacy Professionals (IAPP)’s Publications Advisory Board since 2020 and is recognized by the IAPP and American Bar Association as a Privacy Law Specialist. He holds IAPP certifications in each available subject area and has earned the IAPP’s Artificial Intelligence Governance Professional (AIGP) credential.
Concentrations
•S. state and global privacy law compliance programs, GDPR/ePrivacy compliance, consumer rights processes, opt-out/-in approaches, COPPA/children’s privacy, and vendor management
•Regulatory investigations and enforcement involving the FTC, California Privacy Protection Agency, state attorneys general, and financial services regulators
•Digital advertising, connected television (CTV), data-driven marketing, and ad tech self-regulatory frameworks (DAA, NAI, IAB/IAB Europe), including negotiating advertising agreements and technology transactions involving same
•AI governance, AI product counseling, AI agents and agentic systems, AI vendor reviews, and AI contracting
•Cross-border data transfers and the DOJ Data Security Program under Executive Order 14117
•Website and mobile application tracking technologies, including cookies, pixels, SDKs, session replay, tag management systems, consent management platforms, and Global Privacy Control deployments
•CIPA/state wiretapping laws and risk mitigation
•State data broker registration and compliance, including the California Delete Act and DROP mechanism, as well as related data licensing matters
•Biometric information, precise geolocation, consumer-health information, employee data, age assurance, and other sensitive data requirements
Recognition & Leadership
Awards & Accolades
•Listed, The Legal 500 United States, Media, Technology and Telecoms Cyber law (including data privacy and data protection), 2024-2025
•Listed, Euromoney, Rising Stars, “Rising Star - Americas,” 2020