Starr's Profile

Starr leads the privacy division of the Cybersecurity & Privacy Practice Group. She assists clients with everything from developing globally-compliant privacy programs to defending privacy-focused litigation and regulatory investigations.

After clerking for a federal judge for two years, Starr quickly gained expertise and recognition for her work in the privacy space. Starr has successfully developed hundreds of internationally compliant privacy and information governance plans across several sectors and has served as privacy due diligence counsel on over $10 billion in private equity and M&A-related transactions. Starr has also defended numerous state and federal privacy class action and security breach cases and regulatory investigations.

A tireless worker, Starr is known for her depth and breadth of knowledge related to privacy. She is a member of the steering committee of the privacy and cybersecurity-focused working group of the Sedona Conference and was selected as a Fellow of Information Privacy by the International Association of Privacy Professionals. She is often invited to speak on emerging privacy issues, such as AI, biometrics, and marketing and data analytics. She also serves as an Adjunct Professor at The University of Alabama School of Law where she teaches privacy and data security.

“C Spire chose Maynard’s Privacy and Cybersecurity Group, and Starr Drum in particular, because of her ability to assist us in developing solutions to the real world challenges we meet in our businesses every day. Starr has taken the time necessary to learn about our businesses, processes and most importantly our people, so that she can offer the most effective legal counsel, as well as suggestions that are both helpful and practical to assist us in serving our customers while protecting the privacy and security of our data and systems.”
- Chuck McBride, SVP-Legal, General Counsel, C Spire

Starr's Experience

  • Global privacy and compliance advisory services (BIPA, CCPA, GDPR, etc.)
  • Marketing and digital media compliance advisory services
  • Regulatory investigations
  • Privacy and security litigation defense
  • Privacy due diligence and risk assessments

Starr's Accolades

  • Best Lawyers: Ones to Watch for Corporate Governance and Compliance Law, Technology Law (2021-present)
  • B-Metro Magazine “Top Attorneys” (2020)
  • B-Metro Magazine “Top Lawyers” (2019)
  • Mid-South Super Lawyers "Rising Star" for E-Discovery (2016-2019)
  • Birmingham Business Journal's "Rising Stars In Law" (2018)
  • B-Metro Magazine “Top Women Lawyers” (2018-2019)
  • Selected as a Fellow of Information Privacy, International Association of Privacy Professionals
  • Alabama State Bar Leadership Forum – Class 12
  • Birmingham Bar Association Future Leaders Forum (2015)
  • B-Metro Magazine "Rising Star of the Birmingham Bar" (2013)

Starr's Affiliations and Civic Involvement

Professional Affiliations
  • Birmingham Bar Association, Executive Committee (2020-2022)
  • Sedona Conference Working Group 11 Steering Committee
  • Member of Sedona Conference Working Groups 6 and 11
Civic Involvement
  • Board of Governors for City Club of Birmingham
  • Birmingham Volunteer Lawyers Program
  • Indian Springs School Alumni Council

Starr's Speaking Engagements

April 27, 2022, “Privacy and Data Security Legislative and Regulatory Update,” The Sedona Conference (Phoenix, AZ)

March 10, 2022, “Campus Cybersecurity and Data Privacy – The Path Forward,” ABHES National Conference on Allied Health Education (New Orleans, LA)

October 29, 2021, “Notice and Consent – Biometric Facial Recognition Data,” The Sedona Conference (Houston, TX)

October 28, 2021, “WG 11 Midyear Meeting Town Hall,” The Sedona Conference (Houston, TX)

October 7, 2021, “Cybersecurity and Privacy in Education: Guidelines for Managing and Protecting Data,” CAPPS 37th Annual Conference (San Diego, CA)

September 20, 2021, “Understanding Biometric Data and the Compliance Requirements Associated With Its Use,” SCCE 20th Annual Compliance and Ethics Institute (Las Vegas, NV)

April 15, 2021, “WG 11 Annual Meeting Town Hall,” The Sedona Conference (Webinar)

March 3, 2021, “The Sedona Conference Commentary on Ephemeral Messaging,” The Sedona Conference (Webinar)

October 20, 2020, “Privacy & Security in 2020: What’s Happened and What’s Coming,” Alabama Human Resources Management Conference (Webinar)

September 2, 2020, “Privacy & Security in 2020: What’s Happened and What’s Coming,” Association of Corporate Counsel, Alabama Chapter (Webinar)

July 30, 2020, “The Sedona Conference Commentary on the Enforceability in U.S. Courts of Orders and Judgments Entered under GDPR,” The Sedona Conference (Webinar)

June 24, 2020, “CCPA Enforcement is Right Around the Corner: Best Practices and Tips for Achieving Compliance,” Active Navigation (Webinar)

June 2, 2020, “Operationalizing Privacy and Data Security Compliance in Higher Education,” SCCE 2020 Higher Education Compliance Conference (Webinar)

April 15, 2020, "U.S. Judicial Enforcement of Orders Entered Under the EU General Data Protection Regulation (GDPR)," The Sedona Conference Working Group 11 Annual Meeting 2020 (Webinar)

April 7, 2020, “Staying In Your Privacy Lane: Knowing Your Role and Knowing When to Ask for Help,” IAPP Global Privacy Summit 2020 (Washington, D.C.)*

January 30, 2020, “Privacy in 2020: Where do GDPR and CCPA Stand and What Comes Next,” ControlCase 2020 Data Security and Compliance Summit (Orlando, FL)

November 22, 2019, “There’s An App for That: The ‘Sharing Economy’ and Data Privacy,” Birmingham Bar Association CLE (Birmingham, AL)

July 18, 2019, “Online Privacy: Who’s Monitoring You and How?,” Alabama State Bar Annual Meeting (Point Clear, AL)

June 20, 2019, “U.S. Judicial Enforcement of Orders Entered Under the GDPR,” The Sedona Conference Working Group 11 International Programme Meeting (Hong Kong)

April 3, 2019: “Subject Access Rights Under the GDPR,” International Privacy + Security Forum (Washington, D.C.)

March 8, 2019, “Stuff You Didn’t Learn in Law School: Hot Topics in Privacy and Cybersecurity Law,” Birmingham Bar Membership Forum (Birmingham, AL)

February 28, 2019, “U.S. Judicial Enforcement of Orders Entered Under the EU General Data Protection Regulation (GDPR),” The Sedona Conference Working Group 11 Annual Meeting 2019 (Houston, TX)

February 1, 2019: “Automation and Appellate Advocacy,” Cumberland Law Review Symposium (Birmingham, AL)

November 15, 2018: “GDPR Compliance,” ControlCase 2018 Data Security and Compliance Summit (Ft. Lauderdale, FL)

August 24, 2018: “Navigating the Wild West of Online Privacy in a Rapidly Changing Legal Landscape,” Birmingham Bar Association CLE (Birmingham, AL)

June 28, 2018: “Privacy and Data Security Law: an Overview,” Alabama State Bar Annual Meeting (Sandestin, FL)

April 17, 2018: “Data Privacy and Security Laws: Their Broad Reach and Enforcement.” Birmingham Bar Association Women Lawyers Section CLE (Birmingham, AL)

April 10, 2018: “GDPR Overview and Discussion,” IAPP Birmingham KnowledgeNet Chapter Meeting (Birmingham, AL)

August 24, 2017: “ESI,” Alabama State Bar Lawyer University (Montgomery, AL)

*Postponed due to COVID-19


State Bar: Alabama, California, Florida, Georgia

U.S. District Court: Alabama (Northern, Middle, Southern), Florida (Northern, Middle, Southern), Georgia (Northern, Middle, Southern)

U.S. Court of Appeals: Eleventh Circuit

U.S. Bankruptcy Court

  • University of Alabama School of Law
    • (2009, J.D., Alabama Law Review, Senior Editor; John A. Campbell Moot Court Board; Bench and Bar Legal Honor Society; Criminal Law Moot Court Team; Ethics and Professionalism Trial Team)

  • Emory University
    • (2005, B.A., Film Studies; Kenneth Cole Scholarship Recipient; National Merit Scholarship Recipient)


Judge James E. Graham
Southern District of Georgia

Tuesday, May 24, 2022


Maynard is proud to announce that the firm’s representation of Verasci, a biotechnology company located in Research Triangle, NC, in its strategic sale to WCG Clinical Services was recently recognized among the top middle market deals in the Mergers & Acquisitions Mid-Market Deals of the Year. Maynard is honored to...

Read More
Friday, May 13, 2022


Maynard is proud to announce that the firm’s representation of Alabama-based AAA Cooper Transportation in its acquisition by publicly-traded Knight-Swift Transportation Holdings, Inc. (KNX: NYSE) earned a spot in the recently released list of the top 28 deals recognized in the Mergers & Acquisitions 2022 Mid-Market Deals of the Year...

Read More
Wednesday, May 11, 2022

And Then There Were Five: Connecticut Passes Comprehensive Consumer Privacy Law

Yesterday, Governor Ned Lamont signed into law the Connecticut Data Privacy Act (“CTDPA”). Connecticut is now the fifth U.S. state to enact a comprehensive privacy law, following the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), Virginia’s Consumer Data Protection Act (“VCDPA”), Colorado’s Privacy...

Read More