Privacy & Cybersecurity
The protection of data and personal information is critical to every organization. We assist clients in safeguarding information assets, complying with rapidly evolving privacy and security regulations, and responding effectively to data incidents, regulatory investigations and litigation.
Our privacy and cybersecurity team brings together attorneys with international experience, former in-house privacy counsel, seasoned incident response professionals, and alumni of enforcement agencies responsible for privacy and security regulation.
A Deep, Multidisciplinary Team
- Attorneys with international backgrounds and experience advising on global data protection regimes
- Former in-house privacy counsel with business-focused insight
- One of the most experienced incident response teams in the country
- Alumni of enforcement agencies such as HHS Office for Civil Rights
- Technology transactions attorneys serving mid-market through Fortune 500 companies
Privacy Counseling
We take an interdisciplinary, risk-based approach to privacy and cybersecurity counseling, advising clients on state, federal and international privacy laws.
- CCPA / CPRA and emerging state privacy laws
- HIPAA, GLBA, CAN-SPAM, COPPA and FCRA
- GDPR and UK GDPR
- International privacy laws including Brazil, Canada, Australia, India and China
- PCI compliance, vendor management and third-party data transfers
Representative Privacy Work
- Designing enterprise-wide privacy compliance programs (GDPR, CCPA/CPRA and global frameworks)
- Privacy and security risk assessments and gap analysis
- Outside privacy counsel and privacy hotline services
- Data mapping and records of processing activities
- Development of policies, procedures and internal training
- Cookie, tracking and online advertising compliance
- Data subject rights management
- Privacy due diligence in M&A transactions
- Counseling on ad tech, clinical trials, AI and machine learning
Data Incident Response & Preparedness
Our attorneys have counseled clients through more than two thousand data security incidents, including ransomware, malware, business email compromise, vendor breaches and misdirected disclosures.
When incidents occur, we provide end-to-end response support, including forensic oversight, crisis management, regulatory notifications, litigation defense and coordination with forensic, public relations and identity protection providers.
Industries Served
- Consumer Brands
- Franchise & Retail
- Banking & Financial Services
- Health Care & Pharmaceuticals
- Technology & E-Commerce
- Life Sciences
- Manufacturing
- Food & Beverage
- Education (For-Profit & Nonprofit)
- Professional Services