Xeris E. Gregory

Xeris (pronounced “Karis”) focuses on representing businesses and organizations in complex commercial litigation matters and disputes. She has experience in a wide variety of business-related litigation, particularly complex and mass torts cases, and she navigates complex statutory issues focusing on federal law.

She has successfully defended numerous state and federal privacy and cybersecurity actions and regulatory investigations for clients across sectors. Xeris has successfully defended companies charged with data breach, data privacy and other class actions.

Xeris has earned the ANSI-Accredited Certified Information Privacy Professional/U.S., (CIPP/US) credential through the International Association of Privacy Professionals (IAPP).

Education

University of Alabama School of Law (J.D., 2019)
- The Journal of Legal Profession, Executive Editor
- President of the Student Bar Association
- Bench and Bar Legal Honor Society
- Anna C. Curry Leadership Award, 2019
- Admissions Ambassador
University of Texas at Austin (B.S., 2013)

Bar Admission

Alabama
Texas

Court Admissions

U.S. District Court, Northern District of Illinois
U.S. District Court, Central District of Illinois
U.S. District Court, Northern District of Alabama
U.S. District Court, Middle District of Alabama
U.S. District Court, Southern District of Alabama
U.S. District Court, Southern District of Texas
U.S. District Court, Eastern District of Texas
U.S. District Court, Eastern District of Michigan
U.S. District Court, Eastern District of Missouri
U.S. District Court, District of Colorado
U.S. Court of Appeals, Eleventh Circuit
U.S. Court of Appeals, Fifth Circuit

Recognition

Participant, Polsinelli Trial Academy facilitated by NITA, 2026
Named one of Best Lawyers: Ones to Watch^® in America in Privacy and Data Security Law, 2026
Recognized by Mid-South Super Lawyers as a Rising Star for Class Action/Mass Torts (2021-present)

Publications

All Publications

Online Tracking Litigation: The Risks Keep Evolving

Xeris Gregory and Tyler Anders discuss how evolving privacy, cybersecurity and technology regulations are creating increasingly complex compliance challenges for organizations across industries. They highlight that heightened enforcement activity, expanding data governance obligations and the rapid adoption of AI and emerging technologies are requiring businesses to strengthen risk management, incident response and privacy practices. Xeris and Tyler emphasize that organizations must take a proactive and operational approach to compliance in order to reduce litigation, regulatory and reputational risk in an increasingly scrutinized environment.