Starr's Profile

Starr leads the privacy division of the Cybersecurity & Privacy Practice Group. She assists clients with everything from developing globally-compliant privacy programs to defending privacy-focused litigation and regulatory investigations.

After clerking for a federal judge for two years, Starr quickly gained expertise and recognition for her work in the privacy space. Starr has successfully developed hundreds of internationally compliant privacy and information governance plans across several sectors and has served as privacy due diligence counsel on over $10 billion in private equity and M&A-related transactions. Starr has also defended numerous state and federal privacy class action and security breach cases and regulatory investigations.

A tireless worker, Starr is known for her depth and breadth of knowledge related to privacy. She is a member of the steering committee of the privacy and cybersecurity-focused working group of the Sedona Conference and was selected as a Fellow of Information Privacy by the International Association of Privacy Professionals. She is often invited to speak on emerging privacy issues, such as AI, biometrics, and marketing and data analytics. She also serves as an Adjunct Professor at The University of Alabama School of Law where she teaches privacy and data security.

“C Spire chose Maynard’s Privacy and Cybersecurity Group, and Starr Drum in particular, because of her ability to assist us in developing solutions to the real world challenges we meet in our businesses every day. Starr has taken the time necessary to learn about our businesses, processes and most importantly our people, so that she can offer the most effective legal counsel, as well as suggestions that are both helpful and practical to assist us in serving our customers while protecting the privacy and security of our data and systems.”
- Chuck McBride, SVP-Legal, General Counsel, C Spire

Starr's Experience

  • Global privacy and compliance advisory services (BIPA, CCPA, GDPR, etc.)
  • Marketing and digital media compliance advisory services
  • Regulatory investigations
  • Privacy and security litigation defense
  • Privacy due diligence and risk assessments

Starr's Accolades

  • Best Lawyers: Ones to Watch for Corporate Governance and Compliance Law, Technology Law (2021-present)
  • B-Metro Magazine “Top Attorneys” (2020)
  • B-Metro Magazine “Top Lawyers” (2019)
  • Mid-South Super Lawyers "Rising Star" for E-Discovery (2016-present)
  • Birmingham Business Journal's "Rising Stars In Law" (2018)
  • B-Metro Magazine “Top Women Lawyers” (2018-2019)
  • Selected as a Fellow of Information Privacy, International Association of Privacy Professionals
  • Alabama State Bar Leadership Forum – Class 12
  • Birmingham Bar Association Future Leaders Forum (2015)
  • B-Metro Magazine "Rising Star of the Birmingham Bar" (2013)

Starr's Affiliations and Civic Involvement

Civic Involvement
  • Board of Governors for City Club of Birmingham
  • Birmingham Volunteer Lawyers Program
  • WBHM Junior Advisory Board
  • Indian Springs School Alumni Council
  • Sedona Conference Working Group 11 Steering Committee
  • Member of Sedona Conference Working Groups 6 and 11

Starr's Speaking Engagements

March 3, 2021, “The Sedona Conference Commentary on Ephemeral Messaging,” The Sedona Conference (Webinar)

October 20, 2020, “Privacy & Security in 2020: What’s Happened and What’s Coming,” Alabama Human Resources Management Conference (Webinar)

September 2, 2020, “Privacy & Security in 2020: What’s Happened and What’s Coming,” Association of Corporate Counsel, Alabama Chapter (Webinar)

July 30, 2020, “The Sedona Conference Commentary on the Enforceability in U.S. Courts of Orders and Judgments Entered under GDPR,” The Sedona Conference (Webinar)

June 24, 2020, “CCPA Enforcement is Right Around the Corner: Best Practices and Tips for Achieving Compliance,” Active Navigation (Webinar)

June 2, 2020, “Operationalizing Privacy and Data Security Compliance in Higher Education,” SCCE 2020 Higher Education Compliance Conference (Webinar)

April 15, 2020, "U.S. Judicial Enforcement of Orders Entered Under the EU General Data Protection Regulation (GDPR)," The Sedona Conference Working Group 11 Annual Meeting 2020 (Webinar)

April 7, 2020, “Staying In Your Privacy Lane: Knowing Your Role and Knowing When to Ask for Help,” IAPP Global Privacy Summit 2020 (Washington, D.C.)*

January 30, 2020, “Privacy in 2020: Where do GDPR and CCPA Stand and What Comes Next,” ControlCase 2020 Data Security and Compliance Summit (Orlando, FL)

November 22, 2019, “There’s An App for That: The ‘Sharing Economy’ and Data Privacy,” Birmingham Bar Association CLE (Birmingham, AL)

July 18, 2019, “Online Privacy: Who’s Monitoring You and How?,” Alabama State Bar Annual Meeting (Point Clear, AL)

June 20, 2019, “U.S. Judicial Enforcement of Orders Entered Under the GDPR,” The Sedona Conference Working Group 11 International Programme Meeting (Hong Kong)

April 3, 2019: “Subject Access Rights Under the GDPR,” International Privacy + Security Forum (Washington, D.C.)

March 8, 2019, “Stuff You Didn’t Learn in Law School: Hot Topics in Privacy and Cybersecurity Law,” Birmingham Bar Membership Forum (Birmingham, AL)

February 28, 2019, “U.S. Judicial Enforcement of Orders Entered Under the EU General Data Protection Regulation (GDPR),” The Sedona Conference Working Group 11 Annual Meeting 2019 (Houston, TX)

February 1, 2019: “Automation and Appellate Advocacy,” Cumberland Law Review Symposium (Birmingham, AL)

November 15, 2018: “GDPR Compliance,” ControlCase 2018 Data Security and Compliance Summit (Ft. Lauderdale, FL)

August 24, 2018: “Navigating the Wild West of Online Privacy in a Rapidly Changing Legal Landscape,” Birmingham Bar Association CLE (Birmingham, AL)

June 28, 2018: “Privacy and Data Security Law: an Overview,” Alabama State Bar Annual Meeting (Sandestin, FL)

April 17, 2018: “Data Privacy and Security Laws: Their Broad Reach and Enforcement.” Birmingham Bar Association Women Lawyers Section CLE (Birmingham, AL)

April 10, 2018: “GDPR Overview and Discussion,” IAPP Birmingham KnowledgeNet Chapter Meeting (Birmingham, AL)

August 24, 2017: “ESI,” Alabama State Bar Lawyer University (Montgomery, AL)

*Postponed due to COVID-19


Admissions

State Bar: Alabama, California, Florida, Georgia

U.S. District Court: Alabama (Northern, Middle, Southern), Florida (Middle, Southern), Georgia (Middle, Northern, Southern)

U.S. Court of Appeals: Eleventh Circuit

Education
  • University of Alabama School of Law
    • (2009, J.D., Alabama Law Review, Senior Editor; John A. Campbell Moot Court Board; Bench and Bar Legal Honor Society; Criminal Law Moot Court Team; Ethics and Professionalism Trial Team)

  • Emory University
    • (2005, B.A., Film Studies; Kenneth Cole Scholarship Recipient; National Merit Scholarship Recipient)

Clerkships

Judge James E. Graham
Southern District of Georgia


Thursday, September 9, 2021

The Four Ps of Privacy

Privacy law is growing and evolving at a rapid pace. It can be overwhelming even for practitioners specializing in privacy. To help practitioners and organizations identify which privacy laws apply, Starr Drum, Shareholder, CIPM, CIPP/E, FIP, has established an alliterative privacy issue-spotting mechanism: “the four Ps of privacy.” Read Starr’s...

Read More
Thursday, August 19, 2021

179 Maynard Cooper & Gale Attorneys Recognized in The Best Lawyers in America© 2022

Maynard Cooper & Gale is pleased to announce that 179 of the Firm’s attorneys have been recognized in the 2022 edition of The Best Lawyers in America©, including 17 who are distinguished as “Lawyer of the Year” in their respective areas of expertise and 48 of the Firm’s younger attorneys...

Read More
Wednesday, July 14, 2021

Three’s Company: Colorado Becomes Third U.S. State to Enact Comprehensive Privacy Law

On July 8, 2021, Governor Jared Polis signed into law the Colorado Privacy Act (“ColoPA”). Colorado is now the third U.S. state to enact a comprehensive privacy law, following the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and Virginia’s Consumer Data Protection Act (“VCDPA”). The new...

Read More