- +1 704 339 3152
- hilary.bonaccorsi@dechert.com
- +1 617 275 8384
- vCard
-
Charlotte Office300 South Tryon Street, Suite 800, Charlotte, NC, United States of America 28202
Hilary Bonaccorsi is a partner in Dechert's Cyber, Privacy & AI practice and a nationally recognized privacy, cybersecurity, and artificial intelligence specialist. She helps companies tackle their most complex privacy, cyber and AI governance challenges, bringing a practical, business-minded approach to each matter.
Named a "Next Gen Partner" and "Rising Star" by The Legal 500 for six consecutive years, Ms. Bonaccorsi has a sophisticated understanding of data and emerging technologies — including in the FinTech, AdTech, and HealthTech spaces, and across the AI stack — and has spent over a decade leading global teams and serving as a trusted advisor to financial institutions, technology companies, and private equity-backed ventures.
Ms. Bonaccorsi works closely with general counsels, engineering, product, and operations teams to help companies launch new technology products and services in a manner that balances business needs with fast-shifting legal requirements. She advises clients on the design and implementation of privacy and AI compliance programs and data governance strategies aligned with the growing body of state, federal, and international law — including the CCPA/CPRA, GDPR, GLBA, and the EU AI Act. She routinely works at the intersection of privacy litigation, regulatory enforcement, and compliance, having successfully led companies through the implementation of FTC consent orders and engaged directly with the FTC and state attorneys general in connection with high-stakes enforcement matters.
Ms. Bonaccorsi has particular expertise in financial-services privacy and cybersecurity law, routinely advising large financial institutions, registered investment advisers, and FinTechs on obligations under the GLBA, SEC Regulation S-P, and NYDFS cybersecurity regulations (23 NYCRR Part 500). She counsels some of the world's largest global asset managers on cutting-edge issues and designs strategic privacy and AI programs tailored to industry-specific risk tolerances and regulatory frameworks.
Ms. Bonaccorsi counsels developers and deployers of AI systems on compliance with domestic and international AI frameworks and designs tailored AI governance programs, validation testing protocols, and board-level reporting initiatives.
Ms. Bonaccorsi also supports buy-side and sell-side deal teams in evaluating privacy, cybersecurity, and AI risks in corporate transactions, drawing on experience across hundreds of transactions and complex counseling matters.
A recognized thought leader in the field, Ms. Bonaccorsi is a frequent speaker and has been sought out by financial asset management and investment industry groups to guide thinking on key regulatory developments. She has published articles in the New York Law Journal and the Journal of Artificial Intelligence and Robotics, and serves on the Cyber Bits Partner Committee, Dechert's widely followed publication on key developments in cybersecurity, privacy, and AI. She also maintains an active pro bono practice.
- Global digital media company on the design and implementation of a comprehensive privacy/cyber strategy on an accelerated timeline, managing competing requirements in the US, EU and AIPAC.
- Major FinTech on the design and implementation of a highly customized data governance strategy and privacy, cyber and AI program intended to meet heightened banking regulatory requirements.
- A leading FinTech on assessing the adequacy of AI model development training data and conducting enterprise-level AI audits.
- A key AIPAC telecom provider in the development of an AI-based AR/VR app targeted at the U.S. market and related COPPA issues.
- A public company in its development of an AI governance strategy, establishment of an AI Committee and related risk considerations concerning ethical AI.
- Global publishers, e-commerce companies and mobile apps in their negotiation of complex AdTech agreements including with programmatic, AI-driven ad platforms.
- Many major companies and financial institutions in their proactive and reactive approaches to pixel litigation, which has included sourcing and managing external engineering teams to mitigate risk.
- Multiple tech companies in the design and ongoing implementation of programs to comply with FTC and state attorney general orders and representation during FTC-mandated independent audits.
- Multiple mobile apps in negotiations of settlement orders with the FTC and other regulators involving high-profile privacy/cyber investigations.
- PE sponsors and public and private companies in countless complex and data-heavy transactions, including:
- Estancia Capital Partners and its portfolio company, a leading FinTech, on a recapitalization which included a significant investment from GTCR;
- T. Rowe Price in its acquisition of alternative asset management firm, Oak Hill Advisors; and
- The ad hoc group of secured lenders to Tupperware Brands Corporation in connection with its Chapter 11 case.
- A leading industry group and many of the world’s largest asset managers on privacy, cyber and AI governance strategies, policies and programs in connection with new legal frameworks under CCPA, GDPR, AI regulatory laws, and the SEC’s first updates to Regulation S-P in 20+ years.
- A consumer app in explaining its use of AdTech and presenting its data and advertising strategies to CFIUS for approval under a National Security Agreement.
- A global SaaS platform in its development of an agentic AI application and resulting data usage and monetization strategies and playbooks vis a vis customers.
- Multiple companies to develop strategies to mitigate biometric privacy risks arising from the development and deployment of applications and AI tools involving facial recognition technologies.
- "Next Generation Partner" for Media, Technology and Telecoms: Cyber law including data privacy - Legal 500 US (2024 -2026)
- "Leading Associate" for Media, Technology and Telecoms: Cyber law including data privacy - Legal 500 US (2020 -2024)
- STEM Award Winner - Women Worth Watching (2024)
- U.S. Regulatory Update by Dechert LLP — EFAMA, Webinar (June 14, 2022)
- Compliance Issues in the Current Environment — Dechert LLP, COVID-19 Coronavirus Business Impact Webinar (April 21, 2020)
- Moving Past Talk to Success: How to Manage Efficient and Effective Data Monetization Projects — Dechert LLP, New York, NY (September 19, 2019)
- GDPR: The First Six Months — Dechert LLP, New York, NY (January 23, 2019)
- Fraud Alert: Current Trends & Prevention Techniques — NICSA's 2018 General Membership Meeting, Boston, MA (October 11, 2018)
- The EU General Data Protection Regulation: What You Need to Know as a US-Based Charitable Organization — Dechert LLP, Webinar (April 18, 2018)
- European Data Protection Legislation and the Asset Management Industry — Dechert LLP, Webinar (December 6, 2017)
- Big Data in Capital Markets Investing — Dechert LLP, Webinar (November 14, 2017)
- Cybersecurity and the Board of Directors — Dechert LLP, Webinar (September 27, 2017)
- Cross-Border e-Discovery and Data Sharing: Asia, E.U. and U.S. Perspectives — Dechert LLP, Webinar (September 19, 2017)
- "Crime Watch" session — SuperReturn US East, Boston, MA (June 13, 2017)
- US Data, Cybersecurity and Privacy Issues in M&A Transactions — Dechert LLP, Webinar (March 23, 2017)
- EU-US Data Transfer Under the New Privacy Shield Framework – First Impressions — Dechert LLP, Webinar (November 17, 2016)
- Preparing for and Responding to Data Breaches — Dechert LLP, Webinar (November 18, 2015)
- Designing Privacy Policies and Identifying Privacy Risks for Financial Institutions — Dechert LLP, Webinar (September 29, 2015)
4 Takeaways For Asset Managers From SEC's Cyber Rule Plan - Law360 (March 2022)
European Commission Proposes Regulation on Artificial Intelligence - The Journal of Robotics, Artificial Intelligence & Law (November/December 2021)
European Commission's Propposed Regulation on Artificial Intelligence: Requirements for High-Risk AI Systems - The Journal of Robotics, Artificial Intelligence & Law (November/December 2021)
Amended DFS Regulations Answer Some but Not All Questions - New York Law Journal (January 2017)
-
- University of Rochester, B.A., 2007, magna cum laude
- The University of Texas School of Law, J.D., 2014, with Honors
-
- Massachusetts
- North Carolina