Maria Rouvalis

Managing Associate


Maria Rouvalis provides strategic privacy, cybersecurity and consumer protection advice. Maria regularly defends clients before United States (U.S.) federal and state regulators, including the Federal Trade Commission (FTC) and state attorneys general. She also helps clients develop global privacy and security compliance programs and respond to security incidents.

Maria provides guidance on Section 5 of the FTC Act, the EU Data Protection Regulation (GDPR), U.S. state data breach notification laws and U.S. state privacy laws in California, Colorado, Connecticut, Utah and Virginia (CCPA, CPRA, CPA, CTDPA, UCPA, VCDPA). She also advises clients on strategies for reducing the risk of privacy and security incidents, including by coordinating across business units and by analyzing real-time data flows against the current regulatory landscape.

Prior to joining Orrick, Maria worked as an associate at a boutique litigation firm, where she defended companies in a variety of business disputes. Maria’s law school experience included an internship with the Massachusetts Appeals Court, a law clerk position with Liberty Mutual, where she analyzed European Union data privacy laws, and an assistant producer position with Neil Chayet's “Looking at the Law” program on CBS Radio.

Maria is accredited by the International Association of Privacy Professionals (IAPP) as a Certified Information Privacy Professional in the United States (CIPP/US).