Sarah Rippy
Overview
Sarah Rippy is an attorney in Crowell & Moring's Denver office and a member of the Privacy and Cybersecurity Group, where she practices at the intersection of law and technology. Prior to joining Crowell & Moring, Sarah was a Westin Fellow at the International Association of Privacy Professionals, where she developed a specific emphasis on emerging state privacy laws.
Career & Education
- University of Colorado School of Law at Boulder, J.D., 2020
- St. Olaf College, B.A., magna cum laude, 2016
- Colorado
- District of Columbia
Sarah's Insights
Client Alert | 2 min read | 04.10.26
On April 7, 2026, six federal agencies (FBI, CISA, NSA, EPA, DOE, and U.S. Cyber Command – Cyber National Mission Force) published a joint advisory warning that Iranian-affiliated threat actors are targeting internet-facing OT devices, particularly PLCs. In some cases, the threat actors have caused operational disruptions and financial losses at U.S. critical infrastructure organizations by manipulating software files that contain configuration settings as well as showing false data on hardware and software dashboards and displays.
Blog Post | 11.11.25
Client Alert | 5 min read | 10.08.25
Hacker No Fly Zone: FAA and TSA Propose Cybersecurity Rules for Drone Ecosystem
Client Alert | 6 min read | 09.29.25
White House Seeks Industry Input on Laws and Rules that Hinder AI Development
Insights
U.S. Privacy Legislation: More States Put Laws on the Books
|05.14.24
Privacy and Cybersecurity Outlook: The 2024 Landscape
Everyone’s Talking AI, Including the FTC: Key Takeaways From The FTC’s 2023 AI Guidance
|04.27.23
The Journal of Robotics, Artificial Intelligence & Law
Privacy Patchwork: Looking Back at the 2021 Legislative Session
|09.09.21
International Association of Privacy Professionals: Westin Research Center
Colorado Privacy Act Becomes Law
|07.08.21
International Association of Privacy Professionals: Westin Research Center
Opt-in vs. Opt-out Approaches to Personal Information Processing
|05.10.21
International Association of Privacy Professionals: Westin Research Center
Virginia Passes the Consumer Data Protection Act
|03.03.21
International Association of Privacy Professionals: Westin Research Center
Top-10 Operational Impacts of the CPRA: Part 5—Notice Obligations and Right to Opt Out
|01.28.21
International Association of Privacy Professionals: Westin Research Center
Top-5 Operational Impacts of Brazil's LGPD: Part 4—DPOs
|11.12.20
International Association of Privacy Professionals: Westin Research Center
"The Essentials on Employee Data Privacy," Meru Data Webinar, 2023.
|02.24.23
Big Data v. the Individual’s Right to Privacy on the Road
|11.11.25
Crowell & Moring’s Transportation Law: Moving Forward
OCR Issues Anti-Discrimination Guidance for Pharmacies Related to Reproductive Health Care Services
|07.25.22
Crowell & Moring’s Health Law Blog
Sarah's Insights
Client Alert | 2 min read | 04.10.26
On April 7, 2026, six federal agencies (FBI, CISA, NSA, EPA, DOE, and U.S. Cyber Command – Cyber National Mission Force) published a joint advisory warning that Iranian-affiliated threat actors are targeting internet-facing OT devices, particularly PLCs. In some cases, the threat actors have caused operational disruptions and financial losses at U.S. critical infrastructure organizations by manipulating software files that contain configuration settings as well as showing false data on hardware and software dashboards and displays.
Blog Post | 11.11.25
Client Alert | 5 min read | 10.08.25
Hacker No Fly Zone: FAA and TSA Propose Cybersecurity Rules for Drone Ecosystem
Client Alert | 6 min read | 09.29.25
White House Seeks Industry Input on Laws and Rules that Hinder AI Development
