Cybersecurity and Artificial-Intelligence Risk Management

Who Are We?

We are a premier law firm and consulting agency focused on risk management in cybersecurity, artificial intelligence, and related areas. Founded in 2001, Starrett Law has focused on bridging the gap between law and technology. Since 2017, this firm has maintained a strong competitive advantage with the management of legal and technical risks associated with AI and machine learning.

Why Us?

The scope of our work includes quantifying financial cost and legal risk in all aspects of the modern digital enterprise. Cost-efficiency and simplicity remain primary philosophies. Our approach includes consideration of all regulatory regimes and theories of legal liability as it relates to your entire digital infrastructure, taking into account your specific business risks and risk appetite. 

Our Team

We maintain a network of experts and other relevant professionals to accurately identify, measure, and control your bespoke cyber- and AI-risk needs. Our team is coordinated by Paul Starrett, our Founder.  


Legal and Compliance
  • Prior general counsel and CRO of an artificial-intelligence / data-management company (international, publicly traded)
  • Adjunct professor, Law and Data Science, Master’s in Data Science program at the University of the Pacific (2018-present)
  • Adjunct Professor, Network Security and Enterprise Risk Management, Master’s Program at Utica College (2018-2022)
  • Master of Laws (LL.M.) in Taxation, Golden Gate University
  • Chair of American Bar Association’s Big Data Committee (2013-2020)
  • OneTrust Fellow of Privacy Certification (their highest level)
  • Open FAIR certified and Certified Fraud Examiner (CFE)
  • Licensed attorney (CA)


  • Master’s in Data Science (Predictive Analytics, focus in text analytics and NLP), Northwestern University (2016, 3.4 GPA)
  • Information-security software engineer (including at RSA Security)
  • AWS Developer and AWS Security Certification Coursework
  • Co-organizer of SF Python Meetup group and (seventh year)
  • Computer-forensics Certification (EnCE)


The information contained in this Website is provided for informational purposes only, and should not be construed as legal advice on any subject matter. No recipients of content from this site, clients or otherwise, should act or refrain from acting on the basis of any content included in the site without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from an attorney licensed in the recipient’s state. The content of this Website contains general information and may not reflect current legal developments, verdicts or settlements. The Firm expressly disclaims all liability in respect to actions taken or not taken based on any or all the contents of this Website.

Any information sent to The Firm by Internet e-mail or through the Website is not secure and is done so on a non-confidential basis. Transmission of information from this Website does not create an attorney-client relationship between you and The Firm, nor is it intended to do so. The transmission of the Website, in part or in whole, and/or any communication with us via Internet e-mail through this site does not constitute or create an attorney-client relationship between us and any recipients.

This Website and its contents are provided “AS IS” without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

Furthermore, The Firm does not wish to represent anyone desiring representation based upon viewing this Website in a state where this Website fails to comply with all laws and ethical rules of that state.


Scroll to Top