Mudasar Pham-Khan

• Supported data, analytics, and AI company in its $1.3 billion acquisition of a machine learning platform
• Counseled a video game and media company in the $460 million sale of a subsidiary to a global gaming company
• Counseled a manufacturing company in the $163 million sale of a subsidiary and related portfolio companies to an environmental services firm
• Guided a travel services company through the $135 million sale of its membership interests to a global travel platform
• Assisted a food and beverage company in its $103 million acquisition of a meal kit delivery service
• Supported a private equity fund in its $100 million acquisition of a mechanical services company
• Represented a health care services company in its proposed acquisition of a managed care subsidiary, involving assumption of significant liabilities and capital contributions of up to $90 million
• Represented a traffic safety and equipment rental company in its $92 million sale to a national rentals platform
• Advised a national food distribution company in multiple acquisitions, including an approximately $79 million acquisition of a seafood company
• Provided strategic counsel to a digital communications and technology company in multiple acquisitions, including those involving cloud networking and cybersecurity firms
• Assisted an insurance brokerage platform in multiple acquisition transactions, including asset purchases and agency acquisitions

Technology Transactions

• Served as a core member of a Fortune 500 company's outside counsel commercial contract team, overseeing negotiations on complex commercial contracts referred to outside counsel by the company's internal legal team
• Drafted and negotiated Master Service Agreements (MSAs), Software as a Service (SaaS) agreements, licensing agreements, and related technology contracts for clients ranging from early-stage startups to multinational enterprises
• Drafted full legal infrastructure for SaaS platforms, including subscription agreements, order forms, data processing addenda, terms of use, and privacy policies with alignment to sector-specific regulatory frameworks
• Drafted and negotiated U.S. market master service agreements with embedded order forms and data processing addenda for international technology companies entering the U.S. market
• Negotiated technology licensing agreements with major record labels, including structuring simplified license language, professional services terms, and sublicense provisions
• Reviewed and negotiated AI provider agreements, including addressing AI training rights, AI warranty disclaimers, data use restrictions, and breach notification timelines
• Drafted consumer-facing terms of service and end-user license agreements for technology and app-based companies
• Negotiated partnership and platform agreements for technology companies, identifying and mitigating risks related to venue control, liability allocation, intellectual property, and jurisdiction

Privacy and Data Security Matters

• Advised companies, ranging from startup to Fortune 500 companies, on compliance with state, federal, and international privacy and data protection laws, including the Colorado Privacy Act (ColoPA), the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Gramm-Leach-Bliley Act (GLBA), the Telephone Consumer Privacy Act (TCPA), the Health Insurance Portability and Accountability Act (HIPAA), the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and various other privacy and data protection laws and regulations
• Advised clients across diverse industries—including financial services, technology, real estate, retail, health care, and education—on regulatory compliance with more than 20 state privacy laws and related frameworks
• Developed and modified privacy and data security programs, including privacy policies, terms of use, written information security programs, incident response plans, document retention policies, and other related policies
• Advised business teams on legal risks associated with implementation of various product features and designs, including the use of AI technologies, and formulated practical solutions to manage those risks
• Developed and revised AI policies and advised on AI training rights, AI warranty disclaimers, and related contractual provisions
• Assisted with internal audits and investigations of multiple companies' cybersecurity programs, including forensic investigations and company responses to security incidents and data breaches
• Advised on international data transfer mechanisms, including EU Standard Contractual Clauses (SCCs) and cross-border data protection frameworks