Skip to main content

Christopher J. Buontempo

Member

[email protected]

+1.617.239.8322

Share:

Chris is a corporate attorney who advises companies, investors, and private equity sponsors at the intersection of technology, data, and regulation, with a particular focus on privacy, cybersecurity, and artificial intelligence.

With more than 15 years of experience, Chris is known for helping clients translate complex and rapidly evolving regulatory requirements into practical, business-oriented solutions. He counsels organizations ranging from startups and high-growth companies to global enterprises across the technology, health care, consumer products, financial services, and e-commerce sectors.

A core focus of Chris’s practice is guiding clients through the global privacy and AI regulatory landscape, including compliance with the EU GDPR, the expanding patchwork of US state privacy laws (such as the CCPA), and emerging AI governance regimes. He advises on the design and implementation of scalable compliance programs and has deep experience with sector- and data-specific frameworks, including consumer health data (such as the Washington My Health, My Data Act and similar state laws), biometric data (such as BIPA), children’s and education data (COPPA, FERPA), location-based services, AdTech and tracking technologies, and gaming regulations, including sweepstakes and contests.

Chris is a trusted advisor on the technology, data, and AI aspects of M&A and private equity transactions, representing buyers, sellers, and sponsors in domestic and cross-border deals, including platform acquisitions and add-on investments for private equity sponsors. Chris has developed repeat relationships with sponsors, serving as a go-to advisor across multiple portfolio investments. He works closely with deal teams to assess data assets and technology infrastructure, conduct diligence on privacy and cybersecurity risk, and negotiate transaction terms addressing data rights, AI-related issues, and regulatory exposure. In addition, he drafts and negotiates complex commercial agreements, including SaaS, software licensing, data licensing and sharing arrangements, outsourcing transactions, and strategic technology partnerships. Chris also advises on data commercialization issues, including data brokers, secondary data uses, and regulatory scrutiny of data aggregation and resale.

Beyond transactions, Chris counsels clients on cybersecurity risk management and operational readiness, including incident response planning, vendor and supply chain risk, and the integration of privacy and security considerations into product development and technology procurement. He also conducts privacy audits and risk assessments and advises on the development of policies, procedures, and governance frameworks.

Chris frequently serves as outside general counsel to emerging and middle-market companies, including private equity portfolio companies, advising founders, executive teams, and boards on commercial strategy, contracting, and growth initiatives in data-driven businesses. He regularly supports PE-backed management teams through growth and operational milestones, including post-acquisition integration and preparation for subsequent transactions.

Prior to joining Mintz, Chris held in-house legal leadership roles at a global technology company and a global consumer products organization, where he oversaw legal, privacy, and enterprise risk management functions, giving him a practical understanding of how regulatory requirements impact business operations.

He is an active thought leader who regularly speaks and writes on developments in privacy, cybersecurity, artificial intelligence, and emerging technology law.

Experience

viewpoints

The New York State Department of Financial Services (“NYDFS”) has announced its first enforcement action of NYDFS’ Cybersecurity Regulation, Part 500 of Title 23 (“Cybersecurity Regulation”) against First American Title Insurance Company (“First American”), a leading title insurance provider. 
Read more
Amidst multiple investigations into the privacy and security practices at Zoom Video Communications (“Zoom”), New York Attorney General Letitia James recently announced a settlement agreement with Zoom after the failings of the platform were brought to light by the spike in Zoom video conference participants amid the COVID-19 pandemic.
Read more
Last month, we reported that the United States Senate, Committee on Commerce, Science, and Transportation, conducted a hearing on “Enlisting Big Data in the Fight Against Coronavirus.” Specifically, the Committee focused on “examin[ing] recent uses of aggregate and anonymized consumer data to identify potential hotspots of coronavirus transmission and to help accelerate the development of treatments.”
Read more
The New York Department of Financial Services (“NYDFS”) recently issued new guidance to regulated entities regarding cybersecurity awareness during the COVID-19 pandemic - citing a significant increase in cybercrime and criminals seeking to exploit the pandemic.
Read more
If your company is marketing any smart device, particularly if the device is involved with home security and collects personal information from users, it’s time to pay attention to the story of Tapplock. Tapplock, Inc. (“Tapplock”), is a Canadian Internet of Things (“IoT”) company that sells fingerprint-enabled padlocks that are connected to the Internet (“smart locks”).
Read more
The COVID-19 pandemic and resulting office shutdowns has required many organizations to quickly transition to remote working environments. Going remote often requires a number of technology solutions and tools such as video conferencing, email, cloud file storage, file sharing, chat and communication platforms, and remote desktop applications, just to name a few.
Read more
With cases of the Novel Coronavirus (COVID-19) emerging in nearly every state, many businesses are taking swift action in an effort to curb its spread.  Teleworking, “remote working,” or simply “working from home,” is a centerpiece of those efforts. While remote working arrangements may be effective to slow the community spread of COVID-19 from person to person, they present cybersecurity challenges that can be different than on-premise work. 
Read more
The Washington Privacy Act has overwhelmingly passed the Washington state senate by a vote of 46-1.   Similar legislation passed the state senate last year and failed in the Washington house of representatives.  We will track the bill in the Washington house and update on its status. 
Read more
Back in October, we provided a summary of Article 2 of the California Attorney General’s Initial Proposed CCPA draft regulations, which specify certain notices that must be given to consumers at the time of collection of their personal information, including consumers’ rights to opt-out of the sale of their personal information, and notices of financial incentives a business may offer in exchange for consumers’ personal information.
Read more
Aristotle first suggested that “nature abhors a vacuum,” meaning that where there is a void, the universe seeks to fill it.  Although there has been some movement in Congress towards comprehensive federal privacy legislation states like California have taken up the gauntlet to fill the vacuum. We now have the California Consumer Privacy Act (CCPA) in force and expect to see other states take up similar laws this year. 
Read more
Read less

News & Press

Press Release Thumbnail Mintz

Mintz represented Delta Associated Investigations, a tech-enabled national provider of investigative and claims support services, in connection with A&M Capital Partners' acquisition of a majority interest in the company.

Press Release Thumbnail Mintz

Mintz advised Wavecrest Growth Partners on its acquisition of Dealerware, a leading software platform for dealer fleet and mobility program management, connecting over 60,000 vehicles at nearly 2,000 dealerships and OEMs across the US and Canada.

Read less

Events & Speaking