1. Home
  2. |Professionals
  3. |Sarah Rippy

Sarah Rippy

Associate | She/Her/Hers
Associate | She/Her/Hers
c3JpcHB5QGNyb3dlbGwuY29t
VCardLinkedIn
VCardLinkedIn

Areas of Focus

Overview

Sarah Rippy is an attorney in Crowell & Moring's Denver office and a member of the Privacy and Cybersecurity Group, where she practices at the intersection of law and technology. Prior to joining Crowell & Moring, Sarah was a Westin Fellow at the International Association of Privacy Professionals, where she developed a specific emphasis on emerging state privacy laws.

Upon joining Crowell & Moring, she continued to develop her practice, which focuses on assisting clients navigate the rapidly evolving privacy and AI landscape. Sarah regularly provides practical advice on compliance and best practices related to developing and implementing comprehensive privacy programs. Sarah is also well suited to counsel clients regarding incident response, laws governing social media and children’s data, and AI laws and regulations.

Sarah works with clients of all sizes, from startups to multinational corporations, helping them protect their assets and optimize legal strategies in a fast-changing business environment.

Career & Education

    • University of Colorado School of Law at Boulder, J.D., 2020
    • St. Olaf College, B.A., magna cum laude, 2016
    • University of Colorado School of Law at Boulder, J.D., 2020
    • St. Olaf College, B.A., magna cum laude, 2016

    • Colorado
    • District of Columbia
    • Colorado
    • District of Columbia

Sarah's Insights

Client Alert | 7 min read | 05.27.26

Colorado Hits Reset on AI Regulation: SB 26-189 Repeals and Reenacts the Colorado AI Act

Colorado’s original AI Act (SB 24-205), signed in May 2024, imposed broad obligations on developers and deployers of “high-risk AI systems” — including requiring risk management programs, impact assessments, and affirmative steps to prevent algorithmic discrimination across employment, housing, lending, insurance, health care, and education decisions. The operative date for SB 24-205 was extended twice, and a court temporarily suspended enforcement in early 2026, following a lawsuit filed by xAI, which the U.S. Department of Justice (DOJ) intervened to support. Industry feedback on SB 24-205 was generally negative. In response to this environment, Colorado’s legislature undertook a rewrite, drafting and passing SB 26-189 in a matter of weeks. SB 26-189 reflects the legislature’s effort to preserve the policy goal of filling the AI oversight vacuum given the lack of a comprehensive federal law, but within a more workable compliance framework....

View All Insights

Insights

Client Alert | 7 min read | 05.27.26

Colorado Hits Reset on AI Regulation: SB 26-189 Repeals and Reenacts the Colorado AI Act

Firm News | 2 min read | 05.22.26

Crowell & Moring Represents Kanders & Company in Acquisition of Ginkgo Bioworks’ Biosecurity Business

Client Alert | 3 min read | 05.14.26

CISA’s “CI Fortify” Initiative Signals New Expectations for Critical Infrastructure Resilience: What Operators and Vendors Need to Know

Client Alert | 4 min read | 05.06.26

Genetic Data and Artificial Intelligence Training Following Acquisitions: Emerging Litigation Risk and a Rapidly Expanding State Regulatory Landscape

View All Insights

Practices

Sarah's Insights

Client Alert | 7 min read | 05.27.26

Colorado Hits Reset on AI Regulation: SB 26-189 Repeals and Reenacts the Colorado AI Act

Colorado’s original AI Act (SB 24-205), signed in May 2024, imposed broad obligations on developers and deployers of “high-risk AI systems” — including requiring risk management programs, impact assessments, and affirmative steps to prevent algorithmic discrimination across employment, housing, lending, insurance, health care, and education decisions. The operative date for SB 24-205 was extended twice, and a court temporarily suspended enforcement in early 2026, following a lawsuit filed by xAI, which the U.S. Department of Justice (DOJ) intervened to support. Industry feedback on SB 24-205 was generally negative. In response to this environment, Colorado’s legislature undertook a rewrite, drafting and passing SB 26-189 in a matter of weeks. SB 26-189 reflects the legislature’s effort to preserve the policy goal of filling the AI oversight vacuum given the lack of a comprehensive federal law, but within a more workable compliance framework....

View All Insights