Mudasar Pham-Khan is an associate in Ballard Spahr's Privacy and Data Security Group. Mudasar leverages significant experience in commercial transactions and litigation to advise companies of various sizes and maturity on a broad range of issues related to privacy, data security, AI, finance, e-commerce, social media, mobile and internet-based advertising, and consumer protection. As part of his practice, Mudasar also guides companies across industries through complex licensing transactions, strategic partnerships, vendor agreements, mergers and acquisitions, and other similar types of corporate and commercial arrangements.
Mudasar helps companies develop and maintain their privacy and data security programs, including by drafting company privacy policies, terms of use, written information security policies, document retention programs, and incident response plans. In addition, Mudasar works with companies to ensure that they are compliant with various domestic and international privacy and data security laws.
As part of both his compliance and transactional practices, he has represented companies in the banking, gaming, entertainment, advertising, e-commerce, construction, and travel industries, including by providing privacy- and data security-related advice, in connection with a variety of corporate and commercial transactions.
Representative Experience
Representative Matters
Privacy and Data Security Matters
- Advised companies, ranging from startup to Fortune 500 companies, on compliance with state, federal, and international privacy and data protection laws, including the Colorado Privacy Act (ColoPA), the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Gramm-Leach-Bliley Act (GLBA), the Telephone Consumer Privacy Act (TCPA), and various other privacy and data protection laws and regulations
- Developed and modified privacy and data security programs, including privacy policies, terms of use, written information security programs, incident response plans, document retention policies, and other related policies
- Advised business teams on legal risks associated with implementation of various product features and designs, including the use of AI technologies, and formulated practical solutions to manage those risks
- Assisted with internal audits and investigations of multiple companies' cybersecurity programs, including forensic investigations and company responses to security incidents and data breaches
Professional Highlights
Pro Bono Experience
Secured Presidential commutation for an inmate sentenced to life in prison for non-violent offenses.
Professional Activities
Publications
Mudasar is a regular contributor to the firm's CyberAdviser blog.
Chapter Co-author, "Privacy Regulations Applied to AI Technologies," Artificial Intelligence & Intellectual Property, 2025
Related Insights
Credentials
Education
Georgetown University Law Center (J.D. 2018)
Annual Review Editor, Georgetown Journal of Gender and the Law
Washburn University (B.A., magna cum laude, 2015)
President, Alpha Lambda Delta Honor Society
Admissions
Colorado