Shruti Bhutani Arora

She | Her | Hers

Associate

San Francisco
T +1.415.659.2636
F +1.415.659.2601

Overview

Shruti Bhutani Arora takes a holistic approach in privacy matters as she helps clients with drafting and negotiating complex technology contracts and counsels them on privacy compliance, including compliance with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).

She strives to make things transparent and easy to understand by researching what needs to be done, assimilating it and then providing the information in to clients in an accessible manner. Shruti has also assisted clients of various sizes, both nationally and internationally, with commercial and trademark matters.

Select Experience

  • Assisted clients in fields such as ecommerce, gaming and SaaS products with California Consumer Privacy Act (CCPA) compliance.
  • Assisted a luxury hotel management company with General Data Protection Regulation (GDPR) and CCPA compliance, including preparing internal documentation and training personnel.
  • Assisted academic organizations with privacy compliance.
More »

Experience

  • Assisted clients in fields such as ecommerce, gaming and SaaS products with California Consumer Privacy Act (CCPA) compliance.
  • Assisted a luxury hotel management company with General Data Protection Regulation (GDPR) and CCPA compliance, including preparing internal documentation and training personnel.
  • Assisted academic organizations with privacy compliance.
  • Advised clients on assessing data incidents and determining appropriate response.
  • Assisted clients with drafting and negotiating complex technology contracts, including a technology partnership agreement for a technology client; a master SaaS and services agreement for COVID-19 related products; and a master services agreement for a client providing sterilization and decontamination services.
  • Advised U.S. and India-based clients on trademark prosecution matters, including a brand use agreement for a social networking platform and contest guidelines for an education platform.
  • Directed negotiations for complex technology contracts with industry leaders, including Fortune 500 companies, and counseled clients in advertising agreements, services agreements, and other commercial transactions.
  • Renegotiated escrow clause trigger on behalf of client providing SaaS-based service to Canadian insurance company.
  • Enabled client to continue operations in India by demonstrating that exporting customer data from U.S. to India was allowed under HIPAA regulations subject to HIPAA compliance.
  • Advised startup in redefining the company as a technology platform versus advertising agency, which decreased potential liability surrounding copyright law. Presented case law and federal statute that verified acceptance of terms constitutes proper signature for copyright assignment.
  • Built trademark portfolio of more than 200 trademark applications and registrations as lead attorney. Assisted clients in all aspects of trademark prosecution-related matters. 

Recognitions and Memberships

Recognitions

  • Northern California Super Lawyers
    • "Rising Star" (2022)

Memberships

  • South Asian Bar Association, Florida Chapter: Secretary (2015 to 2016)

Events

Emerging Issues

Prior Positions

  • The Honorable Abby Cynamon, Eleventh Judicial Circuit Court of Florida
    • Civil Appellate Case Manager (2014 to 2015)
    • Summer Legal Intern (2013)

Admissions

  • California
  • Florida

Education

  • J.D., University of Utah S.J. Quinney College of Law, 2014
  • LL.M., Intellectual Property, The George Washington University Law School, 2008
  • B.A., L.L.B, Punjabi University, Army Institute of Law, 2007

Languages

  • Hindi
  • Punjabi

Blog

In The Blogs

Previous Next
Data Counsel
CCPA/CPRA Rulemaking Update: What to Expect
By Shruti Bhutani Arora, Jiwon (Jamie) Kim, Jeewon K. Serrato
December 6, 2022
The California Privacy Protection Agency (“CPPA” or the “Agency”) published on November 3, 2022, a Public Notice of Proposed Modifications and Additional Materials Relied Upon, which starts what we hope is the last round of rulemaking to...
Read More ->
Data Counsel
CCPA Employee and B2B Exemptions Set to Expire on Jan. 1, 2023
By Jerel Pacis Agatep, Shruti Bhutani Arora, Jeewon K. Serrato
September 7, 2022
The California Consumer Privacy Act (CCPA) exemptions for employee and business-to-business Personal Information (PI) likely will not be extended. Aug. 31, 2022 was the last day for each house to pass bills, per the California Constitution...
Read More ->
Data Counsel
CPPA Publishes Notice of Proposed Rulemaking
By Shruti Bhutani Arora, Christine Mastromonaco, Jeewon K. Serrato
July 8, 2022
On July 8, the California Privacy Protection Agency Board (CPPA, Agency or Board) announced the Notice of Proposed Rulemaking (NPRM), which begins the 45-day comment period for the draft regulations. As we previously reported, the...
Read More ->
Data Counsel
California AG Focuses CCPA Enforcement on Loyalty Programs
By Jerel Pacis Agatep, Shruti Bhutani Arora, Jeewon K. Serrato
February 3, 2022
On Jan. 28, 2022, the California Attorney General Rob Bonta (AG) published a statement putting businesses that operate loyalty programs on notice that the California Consumer Privacy Act (CCPA) requirements for a Notice of Financial...
Read More ->
Data Counsel
Federal Banking Regulators Issue 36-Hour Computer-Security Incident Notification Requirement
By Shruti Bhutani Arora, Adam I. Cohen, Andreas T. Kaltsounis, Jeewon K. Serrato
December 14, 2021
As the federal government continues its whole-of-government response to cyber incidents, federal banking regulators took action to impose a new notice requirement on federally regulated banks. In November, the Federal Deposit Insurance...
Read More ->