Karla Lellis

Lellis's research examines cybersecurity class actions through a comparative lens, focusing on how the United States, Brazil, and the European Union define and recognize harm in data-breach cases, and the legal, economic, and policy implications of standing and damage awards.

Her scholarship bridges cybersecurity, privacy, and AI regulation, with a particular interest in how emerging technologies reshape legal frameworks and evidentiary standards. She investigates judicial and regulatory responses to AI-driven harms such as deepfakes, voice cloning, and synthetic media, exploring the use of injunctions, provenance verification, and collective redress to address misinformation and identity manipulation in digital environments.

At UB, Professor Lellis teaches Common Law, Business Law, and Cybersecurity, integrating comparative and interdisciplinary perspectives. Beyond academia, she advises healthcare organizations and startups on data protection, AI governance, and privacy compliance, helping to translate complex legal and policy principles into practical and ethical business strategies.