Maddie Hall

Maddie Hall is a Principal in Smith + Howard’s Cyber Risk practice, where she leads the firm’s Responsible AI and AI Governance work. She helps organizations design and implement right-sized data privacy and AI governance programs that enable the safe, compliant, and business-aligned use of emerging technologies.

Maddie’s team supported a high-growth SaaS client in achieving the first ISO/IEC 42001:2023 certification issued globally. As the first international standard for AI management systems, ISO 42001 establishes a framework for responsibly developing, implementing, and governing AI technologies, including addressing risks such as bias and transparency. This milestone underscores her leadership at the forefront of emerging AI governance standards.

Maddie’s work includes AI governance program design, privacy and security risk assessments, and management system readiness engagements aligned with frameworks such as ISO 27001, ISO 27701, and ISO 42001. She works with SaaS providers and professional services organizations adopting AI at scale, helping them translate regulatory expectations and risk considerations into practical, scalable operating models.

Additionally, Maddie serves as a Microsoft Supplier Security and Privacy Assurance (SSPA) Independent Assessor and Microsoft Preferred Assessor, where she evaluates organizations’ security, privacy, and AI governance controls, including evolving AI-related requirements under the SSPA program. She began her career in operations at a regional professional services firm, where her work in business transformation and organizational change management led to a client-facing role as an SSPA Independent Assessor in 2018.

Hometown

• Bellingham, Washington

Interests and hobbies

• Indoor swimming
• cinema
• vegetarian cooking
• enjoying all of the above with my family

Affiliations

• IAPP (International Association of Privacy Professionals)

Education

• BA, Comparative Literature, University of Washington