Privacy & Data Protection

Overview

We are experienced, responsive privacy and data professionals, helping clients achieve compliance, mitigate risks, and safeguard valuable data.

Our multidisciplinary privacy and data protection team has a defined and proactive approach to helping clients stay up-to-date on constantly evolving international, federal, and state laws and regulations, establishing compliance, and minimizing the risk of data compromise or cyber incidents. In the event of a breach, our reliable team will protect and defend those who have experienced a cyberattack.

Who We Represent

Banks and financial institutions, including credit unions
School districts
Colleges and universities
E-commerce and social media platforms
Hospitals and health care systems
Insurance companies
Manufacturers
Small, mid-size, and large enterprises

We assist clients with the following:

Compliance Advice: We monitor legislation, regulations, and court decisions to help our clients abide by the latest rules. We also identify areas of need by analyzing the strength of existing compliance systems, technical controls, and procedures. We help implement and manage compliance programs customized to your systems and regulatory obligations. This includes training, audits, policies, vendor oversight, mock examinations, and self-assessments to evidence compliance with privacy laws and data protection standards.

Crisis Response: Our crisis response team has extensive experience managing data breaches of all sizes. From initial incident investigation and containment to notification and remediation, we provide end-to-end breach response tailored to your situation. Our services include forensics, reporting to individuals and regulators, litigation defense, public relations, evidence preservation, security upgrades, and audits. We act swiftly to mitigate impacts while ensuring compliance obligations are met in a chaotic environment. Clients count on us to take control in the wake of a breach so they can focus on operations.

Litigation/Class Action Defense: Data breaches inevitably lead to legal claims and regulatory action. We have deep expertise in defending clients against class action lawsuits and government investigations. We aim to resolve matters efficiently but are always trial-ready. Clients rely on our experience managing the litigation lifecycle from initial filings through settlement or trial. We are committed to delivering results while conserving our clients’ resources and protecting their most important relationships. In particular, our class action team devises timely and effective defense strategies with the goal of early dismissal.

Artificial Intelligence: We provide guidance at the intersection of AI and privacy by establishing ethical and acceptable use frameworks, developing model governance standards, and assessing data rights considerations for machine learning applications. Our team has been involved in some of the earliest data licensing negotiations between clients and popular AI applications.

Online Policies: We provide experienced counsel on online privacy issues, including privacy policies, website terms of use, and cookie policies. Our team is committed to ensuring our clients comply with state, federal, and international laws requiring specific disclosures and policies handling personal data.

Privacy & Data Risk Assessment: Our team has broad experience in assisting clients with assessing their data risks and developing legally compliant mitigation policies and procedures. Keeping our clients' resources in mind, we analyze the strength of existing compliance systems, technical controls, and procedures to identify compliance requirements and best practices.

Vendor Agreements: We provide highly responsive and sophisticated reviews of privacy and security provisions in information technology vendor agreements. Our pragmatic approach draws from deep technical and legal experience.