Justin B. Weiss
Overview
In his practice as a senior counsel in Crowell’s Privacy and Cybersecurity Group, Justin B. Weiss draws on over 20 years’ experience of private sector leadership advancing companies’ in-house privacy, cyber, and artificial intelligence (AI) governance capabilities. In addition to providing legal advice and specialized support to technology investors, Justin helps established industries integrate innovations from the internet and digital sectors to inform their own digitization and digital risk management efforts, including compliance with data protection, AI, and evolving digital sector regulatory requirements across jurisdictions.
Career & Education
- Peace Corps
Volunteer, Guinea, 1998–2000 - Department of Justice: United States Attorneys' Office
Appellate Law Clerk/Extern, District of Maine, 2004
- Peace Corps
- Saïd Business School, University of Oxford, Diploma in Global Business, 2024
- University of Maine School of Law, J.D., cum laude, 2006
- Middlebury College, M.A., French, 1998
- Middlebury College, B.A., magna cum laude, 1997
- District of Columbia
- Maine
- U.S. District Court for the District of Maine
Justin's Insights
Client Alert | 11 min read | 03.25.26
White House National AI Policy Framework Calls for Preempting State Laws, Protecting Children
Press Coverage | 02.16.26
Client Alert | 4 min read | 02.05.26
EU–Brazil Mutual Adequacy: A Milestone for Global Data Flows and Latin America’s Digital Positioning
Representative Matters
- Advised and trained listed company boards of directors on digital governance strategy and emerging AI governance expectations.
- Advised hundreds of internet companies of varying sizes and scales operating in diverse jurisdictions on the establishment of data privacy compliance and AI governance programmes, spanning executive and board interface, data mapping, policy setting, employee training, vendor and third-party management, localized compliance, auditing, and reporting.
- Originated public-facing governance documents, drafted disclosures, established ESG and CSRD reporting frameworks for digital domains, prepared media FAQs, and supported crisis communications for listed companies.
- Advised technology investors on data risk in the context of numerous high value transactions in M&A, performing due diligence, developing and responding to questionnaires, establishing pre-closing and post-closing conditions, negotiating and implementing transitional services agreements, and managing buy- and sell-side data privacy compliance.
- Advised on international data transfers strategies across numerous jurisdictions, with special emphasis on U.S.-EU mechanisms, APEC CBPRs, and intra-Group data transfer arrangements.
- Provided product and consumer law counsel to AI development teams designing generative AI tools for deployment within diverse multinational environments, including counsel for compliance with the EU’s AI Act and the U.S. FTC Act.
- Represented major internet companies before Data Protection Authorities in numerous jurisdictions, including in testimony before the Article 29 Working party (now EDPB) in the context of data portability obligations imposed on search engine providers.
- Prepared testimony and briefed chief information security officer of a major global Internet firm to appear before the U.S. Senate Permanent Subcommittee on Investigations.
- Extensive operational and product management experience across diverse growth markets, with notable depth in BRICs+ environments.
Justin's Insights
Client Alert | 11 min read | 03.25.26
White House National AI Policy Framework Calls for Preempting State Laws, Protecting Children
Press Coverage | 02.16.26
Client Alert | 4 min read | 02.05.26
EU–Brazil Mutual Adequacy: A Milestone for Global Data Flows and Latin America’s Digital Positioning
Insights
"Privacy in M&A Transactions: The Playbook," International Association of Privacy Professionals
|12.02.21
"Data Processing Agreements: Coordination, Drafting and Negotiation,' International Association of Privacy Professionals (IAPP)
|05.01.19
"Privacy by Design and User Interfaces: Emerging Design Criteria – Keep it User-Centric," Office of the Information Privacy Commissioner of Ontario
|06.21.12
White House National AI Policy Framework Calls for Preempting State Laws, Protecting Children
|04.25.26
Crowell & Moring’s Retail & Consumer Products Law Observer
Justin's Insights
Client Alert | 11 min read | 03.25.26
White House National AI Policy Framework Calls for Preempting State Laws, Protecting Children
Press Coverage | 02.16.26
Client Alert | 4 min read | 02.05.26
EU–Brazil Mutual Adequacy: A Milestone for Global Data Flows and Latin America’s Digital Positioning




