Sarah Knight focuses her practice on data privacy, cybersecurity, information governance and artificial intelligence (AI). Prior to joining Norton Rose Fulbright, Sarah served as Chief Privacy Officer for a global medical device and technology company and a biopharmaceutical company, leading the privacy, cybersecurity and information governance legal teams. She also has experience working in the intelligence community and the automotive industry. She has extensive experience building global privacy programs and developing policies and practices for the collection, storage, transfer and use of personal information, as well as eDiscovery counseling and litigation.

With nearly a decade of in-house experience, Sarah understands clients' challenges, priorities and concerns, and knows what clients expect from their outside counsel. Her approach focuses on practical guidance to simplify compliance with a multitude of data protection laws and regulations globally, including GDPR, HIPAA, TCPA, FTC Act, PIPL, LGPD and CCPA/CPRA and other state privacy laws. Sarah's technical background allows her to partner closely with Chief Information Security Officers (CISOs) to measure and mitigate cyber risk, including breach and ransom attack preparedness, data classification and third-party risk management. Sarah has also driven the strategy and implementation of an AI governance framework for a large multinational organization.

Sarah is a Certified Information Privacy Professional for both the European Union (CIPP/E) and the United States (CIPP/US) through the International Association of Privacy Professionals (IAPP). She is also a Certified Information Privacy Manager (CIPM) and a OneTrust Certified Privacy Management Professional.