Meet John
JOHN LOWELL, ESQ.
John Lowell is a technology transactions, data privacy, product, and AI attorney with more than 15 years of experience advising Fortune 500 companies, global technology organizations, and high-growth businesses. He helps companies and in-house legal teams negotiate complex commercial agreements, bring technology products to market, build privacy and AI governance programs, and manage cybersecurity and regulatory risk.
John has served as Product & Privacy Counsel at HCLTech, advising seven product families acquired from IBM, and as Assistant General Counsel and Privacy Counsel at Rite Aid. He has also advised Meta, Hopin, AutoZone, and Korn Ferry on privacy, product, and technology matters.
- 212-537-9209 ext. 134
- john@thebusinesslawfirm.com
Enterprise Experience Across Regulated Industries
His work spans technology and software, healthcare, retail, government and higher education, energy and utilities, aerospace, telecommunications, financial services, consulting, and human capital.
John’s privacy and AI practice includes privacy by design, global data governance, GDPR and U.S. state privacy compliance, HIPAA, cross-border data transfers, cybersecurity, incident response, employee privacy, AI risk assessments, and responsible AI governance. He also evaluates AI-enabled products and features, develops AI governance frameworks, and drafts and negotiates AI contractual provisions.
Corporate, Technology Transactions, Privacy & AI
John works alongside product, engineering, security, sales, procurement, marketing, and executive teams throughout the product and contracting lifecycle. He structures and negotiates SaaS and cloud agreements, software licenses, master services agreements and statements of work, professional services agreements, outsourcing arrangements, strategic partnerships, reseller and distribution agreements, data processing agreements, vendor agreements, product terms, and privacy policies.
Having represented both technology providers and enterprise customers, John understands the commercial pressures on both sides of the table. He focuses negotiations on the issues that create meaningful business, data, and regulatory exposure, without allowing lower-value points to consume the deal.
Global Experience
John has advised on transactions, product launches, privacy programs, and regulatory matters across North America, Europe, Latin America, the Middle East, Africa, India, and Southeast Asia.
Representative Matters
-
- $1 billion healthcare IT infrastructure transaction. Served on the legal team negotiating an IT infrastructure agreement with a leading health insurance company and reviewed Business Associate Agreements for compliance.
- $40 million aerospace agreement. Negotiated and closed an aerospace design and manufacturing agreement involving onsite services in Canada and offshore services in India.
- Utility SAP implementation. Negotiated and closed an SAP implementation agreement for a utility company in a major U.S. metropolitan area, involving both onsite and offshore services.
- Public-sector Salesforce implementations. Negotiated multiple agreements with state government entities and state universities for Software implementation for multiple public sector and intergovernmental organizations and configuration services.
- $25 million telecommunications outsourcing agreement. Negotiated an agreement with a major North American telecommunications company to operate a call center in Central America for a large energy customer.
- More than 2,000 technology procurement transactions. Negotiated and closed software and services agreements for HCL Technologies customers, including enterprise software licenses, SaaS agreements, support and maintenance agreements, value-added reseller agreements, and subcontracting agreements.
Focus
-
- Technology Transactions and Complex Commercial Contracts
- SaaS, Cloud, and Software Licensing
- Data Privacy and Global Data Protection
- AI Governance and AI Contracting
- Product Counseling and Commercialization
- Healthcare Privacy, HIPAA Compliance, and Business Associate Agreements (BAAs)
- Data Processing Agreements and Cybersecurity Terms
- Privacy and Security by Design
- Vendor, Procurement, and Outsourcing Agreements
- Cross-Border Data Transfers
Background and Education
Over the course of his career, John has held senior legal roles including Assistant General Counsel, Privacy & Data Security, Product & Privacy Counsel, Global Privacy Counsel, and Acting Privacy Officer for the Americas.
John received his J.D. from The Ohio State University Moritz College of Law and his B.A. in Political Science, magna cum laude, from Wake Forest University. He is admitted to practice in New York.
Fun Fact
John is the sole inventor and holder of a U.S. patent, giving him a firsthand perspective on technology and innovation beyond his work as legal counsel.
execute Your Vision Today
We are all about Smart Risk Taking. You don’t want lawyers to tell you what you cannot do, you want lawyers to tell you how to do what you want to do. That’s where we come in