On demand webinars

Michael Lucas is a principal leading Crowe's privacy practice within the Consulting group, with over 17 years of experience serving global clients. Michael has spent his career solving cybersecurity, privacy, and data protection challenges for clients in regulated industries. Michael specifically focuses on the “second line of defense” within organizations — notably CISOs and risk management teams. He has led numerous projects helping clients assess, design, and optimize components of their organization’s cybersecurity, privacy, and data protection programs. Michael's efforts have helped his clients reduce their overall technology risks and better meet their regulatory compliance obligations.

Kristen Rohrer is an experienced manager in Crowe’s Consulting group, specializing in privacy, data protection, and operational process improvement for global clients in regulated industries, particularly the life sciences sector. With over seven years of experience, she adeptly oversees the execution of diverse privacy projects for a range of clients from private companies to large, multinational corporations. Holding certifications as a Certified Internal Auditor (CIA) and a Certified Information Privacy Manager (CIPM), Kristen has found a specialty of assessing companies' compliance with privacy regulations using a comprehensive privacy framework. From these assessments, she assists companies in identifying gaps and crafts strategic next steps to enhance the maturity of their privacy programs. Her proactive approach helps clients not only meet regulatory requirements but also advance their data protection practices. At Crowe, Kristen has played a pivotal role in developing and enhancing privacy control frameworks to ensure compliance with stringent regulations such as GDPR, CPRA, PIPL, and LGPD. Her leadership was influential in mapping global privacy regulations to develop an inventory of Crowe privacy controls, enabling their concise and effective application. A strategic thinker and trusted advisor, Kristen continues to drive value for her clients by seamlessly integrating privacy and data protection principles into their operational frameworks, ensuring both regulatory compliance and operational excellence.