Photo of Tracy Marshall

Tracy Marshall counsels international and domestic for-profit and non-profit clients on a range of privacy, data security, advertising, promotions, and intellectual property matters. She also advises on general corporate and transactional matters.

Tracy assists clients with compliance and advocates on their behalf. She is a Certified Information Privacy Professional (CIPP/US) through the International Association of Privacy Professionals (IAPP) and helps clients implement privacy, data security, and security breach response programs, develop internal and public-facing privacy policies to comply with applicable laws, respond to cyber and data security incidents, and manage relationships with service providers and third parties. Tracy advises on structuring and conducting email and text messaging campaigns, sweepstakes, contests, and other promotions, and she helps clients protect and enforce their intellectual property rights.

In addition, Tracy counsels clients on corporate matters and assists with structuring and negotiating a variety of transactions, including licensing, marketing, and outsourcing arrangements.

Tracy is frequently invited to speak at privacy, data security, telecommunications, and advertising conferences and is a contributor to Keller and Heckman’s Consumer Protection Connection blog and Beyond Telecom Law Blog.


To learn more about Tracy's practice areas, click here.

Businesses making negative option or auto-renewal subscription offers, beware: Federal Trade Commission (FTC or Commission) enforcement is alive and well in 2025. Although the U.S. Court of Appeals for the Eighth Circuit struck down the FTC’s much-criticized Biden-era “click to cancel” rule earlier this summer, on September 25, 2025 the FTC announced that Amazon.com, Inc.

Google and two Disney companies recently settled lawsuits alleging that the companies violated children’s privacy laws, once again demonstrating a heightened interest in protecting children online and putting content creators and channel owners on notice that they will be subject to strict liability for violations of federal and state privacy laws. On August 18, 2025

A new year. A new administration in Washington. While protecting kids and teens is likely to remain an issue that drives legislation, litigation, and policy discussions in 2025, issuance of 1,000 Executive Orders on day one of the Trump Administration may result in new or changed priorities and some delay in the effective date of

The interagency Kids Online Health and Safety Task Force, which was created last year and is led by the Department of Commerce (through the National Telecommunications and Information Administration) and the Department of Health and Human Services (through the Substance Abuse and Mental Health Services Administration), released a report on protecting minors online, Online Health