Sarah K. Caruso

Sarah is an Associate in Maynard Nexsen’s Private Markets practice group. 

Sarah is skilled in privacy program operations and management. She synthesizes complex statutory and regulatory requirements, providing clients with actionable steps to ensure their adherence to set standards, as well as drafting and refining accompanying governance documentation.

Sarah has experience conducting audits and responding to external auditors, reviewing and drafting governance documentation, crafting compliance roadmaps and enhancing privacy programs, including realigning key program functions to improve efficiencies, maintain compliance with in-scope regulations and provide pathways to address individual privacy rights.

Sarah drafts privacy and security programs and regulations to ensure regulatory compliance with GDPR, CCPA/CCPRA, LGPD, PIPEDA, NIST CSF and ISO 27002:2022 laws, regulations and requirements. 

Prior to joining Maynard Nexsen, Sarah served as a Data Privacy Consultant at Deloitte, where she conducted privacy process reviews and impact assessments. She also regularly provided privacy risk workshops and drafted guidelines on technical implementation and regulations for new business units. 

Sarah holds a J.D. from Northeastern University School of Law and a B.A., magna cum laude, from Quinnipiac University.