Skip to Main Content

Meet Our Professionals

Robert M. Botkin

Partner
AI Services Team Leader
Charlotte | 704.335.2703
Raleigh | By Appointment Only
Fax | 704.334.4706

Robert Botkin helps clients of all sizes, from Fortune 50 companies to startups, navigate their legal needs tied to privacy, cybersecurity, artificial intelligence (AI), and machine learning. He advises clients on the responsible implementation, deployment, and governance of AI, as well as the intersecting legal, regulatory, and commercial risks associated with emerging technologies. Clients turn to him across industries, including technology, retail, automotive, health care, life sciences, and finance.

Robert is known for his ability to translate complex technical concepts and issues into actionable tasks that clients can use to establish effective governance programs in a rapidly changing legal landscape. Robert helps drive projects by simplifying large compliance initiatives into a series of manageable steps in order to properly assess and mitigate enterprise risks stemming from privacy, cybersecurity, and emerging technologies. This practical approach allows his clients to achieve their compliance goals while integrating technological advances, like generative AI, at speed and scale.

Robert has experience developing privacy notices, responding to security incidents, and implementing data governance programs, as well as reviewing and negotiating master agreements, software-as-a-service (SaaS) agreements, software license agreements, AI-related commercial agreements, and other technology contracts. Additionally, he advises clients on AI governance, procurement, deployment, enterprise risk management, and the evolving regulatory landscape surrounding AI, biometrics, and Internet of Things (IoT) devices. His mix of regulatory, transactional, and technology counseling experience allows him to provide tailored, business-focused, and time-sensitive solutions.

Robert is an International Association of Privacy Professionals (IAPP) Certified Privacy Law Specialist (PLS), Certified Information Privacy Technologist (CIPT), IAPP Certified Information Privacy Practitioner/United States (CIPP/US), IAPP Artificial Intelligence Governance Professional (AIGP), and Amazon Web Services (AWS) Certified Cloud Practitioner.

Prior to joining the firm, Robert was an associate at a large transatlantic law firm and an associate vice president of a bulge bracket bank's Legal Data Protection and Sourcing team.

Outside of work, Robert serves on the advisory boards of Chabad Young Professionals of Raleigh and the Plant Era.

Representative Experience

Cybersecurity Incident & Data Breach Response

  • Handled the largest data breach within a sector and advised client during government investigations, data breach remediation, and post-incident information security program considerations.
  • Led a security incident investigation for a SaaS provider and advised on end-user communications, public disclosure requirements, and liability stemming from outages.

Privacy, Data Governance & Technology Contracting

  • Advised multinational corporations on structuring information security and data governance programs.
  • Drafted data processing agreements, information security agreements, and data sharing agreements tailored to the clients' specific products and services, sophistication, and risk profile.
  • Drafted website and mobile application terms and conditions, privacy policies, and end-user license agreements, and advised clients on best practices for structuring data flows and user interfaces.

Artificial Intelligence (AI) & Emerging Technology

  • Advised clients on global legal and regulatory requirements when launching biometric authentication for customer use.
  • Advised clients on international privacy security requirements applicable to the commercialization of virtual reality devices.
  • Provided cross-border regulatory analysis for the deployment of AI and machine learning technologies, including generative AI features integrated into system-level applications for voice, text, and image functionality.
  • Advised clients on integrating AI into consumer-facing products, deploying AI-assisted tools within enterprise environments, and addressing the associated privacy, regulatory, and intellectual property considerations.
  • Advised AI companies and enterprise clients on negotiating AI procurement, licensing, and other commercial agreements supporting the deployment and commercialization of AI-enabled products and services.
  • Counseled a multinational food distributor on AI governance for marketing and HR functions across global jurisdictions, including maintaining an AI use tracker and identifying potential legal risks arising from enterprise AI adoption.
  • Represented a global warehouse robotics company in negotiating commercial agreements licensing autonomous robots.
  • Advised an international consumer products company on the use of AI-generated content in its advertising and marketing materials.
  • Advised clients on data privacy and cybersecurity considerations during the development of an Internet of Things (IoT) connected device.
  • Advised Fortune 50 company on GDPR and ePrivacy Directive compliance with regard to websites, applications, and virtual reality devices.

Data Privacy, Cybersecurity & Regulatory Compliance

  • Advised buy-side and sell-side clients on data privacy and cybersecurity due diligence during the mergers and acquisitions process.
  • Advised clients on streamlining obligations from privacy laws applicable to their business, such as the Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), ePrivacy Directive, California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), California Invasion of Privacy Act (CIPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Utah Consumer Privacy Act (UCPA), Gramm-Leach-Bliley Act (GLBA), Children's Online Privacy Protection Act (COPPA), Family Educational Rights and Privacy Act (FERPA), state education privacy laws, and state utility privacy laws.
  • Led reviews of data security, information governance, and IT policies for clients across industries for compliance with the NIST Cybersecurity Framework.
  • Advised clients and marketing teams on Telephone Consumer Protection Act (TCPA) and CAN-SPAM compliance, including development and implementation of internal marketing policies and guidelines.

Loading content

Loading content

Honors & Awards

  • The Best Lawyers in America "Ones to Watch" in Intellectual Property Law, Privacy and Data Security Law, Technology Law, 2026
  • International Association of Privacy Professionals (IAPP), Certified Information Privacy Practitioner/ U.S., 2021- Present
  • Amazon Web Services Certified Cloud Practitioner, 2021- Present
  • International Association of Privacy Professionals (IAPP), Certified Information Privacy Technologist, 2021-Present
  • International Association of Privacy Professionals (IAPP), Certified Artificial Intelligence Governance Professional, 2025-present
  • Leadership Raleigh, Class of 2025

Memberships and Affiliations

  • The Plant Era, Strategic Advisor, 2021-Present 
  • Chabad Young Professionals Board of Directors, Chairman of the Board, 2018 – Present