Profile

Education

  • William & Mary Law School, JD, 2022
  • University of Toronto, BA (honors with high distinction), 2016

Alecsandra Dragus is an associate in Kennedys’ Cyber and Data Privacy team. Her practice focuses on advising clients on data protection, cybersecurity and artificial intelligence governance, with particular emphasis on emerging technologies and regulatory compliance.

She supports clients across a range of sectors—including technology, healthcare, financial services and retail—on matters including incident response, privacy risk mitigation and development of scalable compliance frameworks. Alecsandra regularly assists in the creation and implementation of bespoke privacy programs and advises on the integration of privacy requirements into commercial agreements and vendor contracts.

Before joining Kennedys, Alecsandra worked at a leading global professional services firm, where she developed practical, data-driven privacy strategies for multinational clients and advised on operationalizing compliance at scale.

During law school, she collaborated with corporate legal teams on biometric technology and Responsible AI initiatives and served as Executive Articles Editor of the William & Mary Business Law Review.

Certifications

  • Certified Information Privacy Professional/Europe (CIPP/E)

Languages

  • Romanian
  • Spanish

Qualifications and admissions

  • New York

Work highlights

  • Advising on comprehensive privacy compliance programs across industries
  • Managing cybersecurity incidents, including ransomware and business email compromise events
  • Designing AI governance frameworks for technology clients
  • Supporting the deployment of AI-enabled tools to enhance compliance lifecycle management