Â鶹ʮÈýÅ®ÀÉ

Skip to Main Content
Capabilities / Data Privacy & Cybersecurity

Data Privacy & Cybersecurity

Empowering organizations to protect and maximize their information assets.

At Â鶹ʮÈýÅ®ÀÉ, our Data Privacy & Cybersecurity law team partners with clients to unlock the value of their information while ensuring compliance, reducing risk, and advancing long-term data security goals. We help organizations safeguard against cybertheft and unauthorized disclosures, proactively assess cybersecurity risks, and implement best practices to prepare for security incidents. When a data breach is suspected, our data privacy and cybersecurity attorneys respond immediately—minimizing damage to business operations and reputation.

We provide strategic counsel on compliance with data privacy and cybersecurity laws, including the federal laws applicable to the educational, financial, healthcare, and telecommunication sectors, as well as the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Colorado Privacy Act (CPA), and other state and international privacy frameworks, including the European Union’s General Data Protection Regulation (GDPR).

Our team of data privacy lawyers also includes a team with significant experience defending clients in privacy litigation, including claims related to the use of cookies, pixels, session replay technology, website chat functionality, and other common website marketing tools that may implicate state privacy, wiretapping, and pen register and trap and trace laws.

Stay ahead of the latest legal trends—subscribe to our blog for updates on data privacy and cybersecurity developments.

Data Privacy

Our data privacy services include:

  • Preparing data processing agreements, privacy notices, and terms of use
  • Providing large-scale privacy and information management training for corporate personnel
  • Preparing and negotiating privacy-compliant business agreements
  • Representing clients in privacy litigation and regulatory investigations
  • Responding to federal and state regulators in the face of enforcement actions and class actions
  • Designing and implementing records retention schedules, file plans, and legal hold processes for organizations across industries, including financial services, energy, healthcare, and utilities

In addition to advising on comprehensive international and state privacy laws, we advise clients on compliance with sector-specific regulations, including:

  • Health Insurance Portability and Accountability Act (HIPAA) for healthcare
  • Gramm-Leach-Bliley Act (GLBA) for financial services
  • Family Educational Rights and Privacy Act (FERPA) for colleges and universities
  • Telephone Consumer Protection Act (TCPA) for communications
  • Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act) for marketing
  • Electronic Fund Transfer Act (EFTA) for financial transactions
  • Fair Credit Reporting Act (FCRA) and Fair and Accurate Credit Transactions Act (FACTA) for credit reporting
  • Children’s Online Privacy Protection Act (COPPA) for children’s data
  • Other state and federal privacy regulations
Cybersecurity

Our team draws on decades of government, military, national intelligence, and industry experience to help clients address complex cybersecurity and emerging technology challenges. We have experience supporting highly regulated sectors and critical infrastructure, including energy, mining, aviation, utilities, and the Defense Industrial Base (DIB). Our attorneys guide organizations through compliance with statutory, regulatory, and industry cybersecurity standards. We also offer practical insights into federal expectations, enforcement actions, and information-sharing initiatives.

We provide comprehensive services, including:

  • Developing and implementing information security compliance programs
  • Quarterbacking Incident Response efforts, through every phase of the response
  • Coordinating third-party resources to aid clients in risk analysis activities 
  • Performing cyber risk and vulnerability assessments tailored to operational technology and critical infrastructure
  • Implementing compliant security controls and employee training on industry best practices
  • Assisting DIB contractors with Cybersecurity Maturity Model Certification efforts
  • Conducting data security tabletop exercises, cyber liability insurance evaluation, and records retention policies
  • Delivering strategic advice on AI integration; cybersecurity; due diligence for M&A opportunities, procurement decisions, and product development; and global regulatory requirements
Breach Response

When protected information is compromised or lost, our breach response attorneys act swiftly to assess legal obligations, identify next steps, and minimize operational and reputational harm. We guide clients through every critical activity after a data breach—including notification, insurance coverage, regulatory reporting, and communications—ensuring these steps are handled with minimal confusion, cost, risk, and delay during a high-stakes crisis.

Representative Experience

Records Management & Information Governance

  • Developed records retention schedules, file plans, and information management policies for:
    • An $83 billion asset management and financial planning firm.
    • A financial services and national bank holding company with $33 billion in managed assets.
    • Multistate power and gas utilities and pipelines.
    • A Fortune 100 pharmacy benefits management company.
  • Developed legal hold processes for organizations in the energy, retail, and manufacturing industries.
  • Validated records retention schedules for hospitals, health systems, pharmaceutical and biotechnology companies, pharmacy benefit management companies, and medical equipment manufacturers.
  • Delivered processes and presented training on compliant records management and disposal for organizations undergoing corporate headquarters moves.
  • Provided information management training to over 900 corporate personnel at a professional services company.
  • Advised on records retention and information management policies, procedures, and implementation for various clients.
  • Advised regarding legacy data remediation for a regulated public utility.

Privacy & Security Compliance

  • Drafted medical staff bylaws, rules, and regulations, including HIPAA-compliant policies and procedures.
  • Performed HIPAA Security Rule risk assessments for covered entities and business associates, including long-term care facilities and third-party administrators.
  • Counseled a large pharmaceutical client on HIPAA de-identification practices and developed guidelines for transmitting de-identified information to third parties.

Incident Response & Breach Counseling

  • Represented clients in health information data breaches involving more than a half-million patients’ medical records; advised on breach response and best practices to protect patient data.
  • Coordinated the assistance from federal resources to assist clients limit the consequences of data breach incidents.
  • Represented lending institutions in analysis of phishing scams and Adversary-in-the Middle attacks, as well as in ensuing investigations by NYDFS and other state banking/licensing commissions that resulted in zero adverse actions or penalties by those state agencies.
  • Represented a specialty physician group practice after a compromise of patient records, leading to the return of records and full HIPAA/HITECH compliance.
  • Defended numerous healthcare clients in HIPAA investigations, including breaches involving 500 or more individuals; provided expert testimony in court cases.
  • Served as breach counsel and handled all aspects of a phishing attack experienced by a large state university.
  • Served as breach counsel for a state university foundation after a third-party data breach, working with the CISO to coordinate regulatory response.
Blog | July 31, 2025
Blog | July 25, 2025
Blog | July 16, 2025
Blog | June 25, 2025
Blog | June 23, 2025
Blog | June 22, 2025
Blog | June 15, 2025
Blog | June 08, 2025
Blog | June 01, 2025
Blog | May 26, 2025
Blog | May 17, 2025
Blog | May 11, 2025
Blog | May 07, 2025
Blog | May 06, 2025
Blog | May 05, 2025
Blog | May 04, 2025
Blog | April 30, 2025
Blog | April 27, 2025
Blog | April 24, 2025
Blog | April 20, 2025
Blog | April 17, 2025
Blog | April 15, 2025
Blog | April 13, 2025
Blog | April 05, 2025
Blog | March 30, 2025
Blog | March 18, 2025
Blog | March 17, 2025
Blog | March 15, 2025
Blog | March 13, 2025
Blog | March 10, 2025
Blog | March 09, 2025
Blog | March 02, 2025
Blog | February 25, 2025
Blog | February 23, 2025
Blog | February 21, 2025
Blog | February 20, 2025
Blog | February 17, 2025
Blog | February 11, 2025
Blog | February 11, 2025
Blog | February 09, 2025
Blog | February 02, 2025
Blog | January 29, 2025
Blog | January 28, 2025
Blog | January 27, 2025
Blog | January 26, 2025
Blog | January 21, 2025
Blog | January 20, 2025
Blog | January 17, 2025
Blog | January 13, 2025
Blog | January 12, 2025
Blog | January 06, 2025
Blog | January 05, 2025
Blog | December 28, 2024
Blog | December 22, 2024
Blog | December 08, 2024
Blog | November 15, 2024
Blog | November 13, 2024
Blog | November 12, 2024
Blog | November 09, 2024
Articles | November 06, 2024
Legal Insights for Manufacturing: Cybersecurity

As cyber threats increase and attack surfaces proliferate, protecting an organization’s network systems, customer data, proprietary information, and operational technology against unauthorized access grows more challenging.

Blog | November 04, 2024
Blog | November 01, 2024
Blog | October 28, 2024
White Papers | October 24, 2024
Legal Insights for Manufacturing: Outlook for 2025

Intensifying geopolitical crises, increasing regulatory burdens, and uncertain macroeconomic conditions have led to an era of caution for manufacturers.

Blog | October 21, 2024
Blog | October 07, 2024
Blog | September 18, 2024
Blog | September 14, 2024
Articles | September 10, 2024
Blog | September 09, 2024
Blog | September 01, 2024
Blog | August 25, 2024
Articles | August 22, 2024
Blog | August 22, 2024
Blog | August 20, 2024
Blog | August 19, 2024
Blog | August 17, 2024
Blog | August 10, 2024
Blog | August 04, 2024
Blog | July 31, 2024
Blog | July 30, 2024
Blog | July 21, 2024
Blog | July 16, 2024
Blog | June 19, 2024
Blog | June 15, 2024
Blog | June 12, 2024
Blog | June 09, 2024
Blog | June 05, 2024
Blog | May 19, 2024
Blog | May 16, 2024
Blog | May 12, 2024
Blog | May 08, 2024
Blog | May 06, 2024
Blog | May 05, 2024
Blog | May 02, 2024
Blog | April 28, 2024
Blog | April 24, 2024
Blog | April 21, 2024
Blog | April 14, 2024
Blog | April 11, 2024
Blog | April 09, 2024
Blog | April 08, 2024
Blog | April 07, 2024
Blog | April 01, 2024
Blog | March 31, 2024
Blog | March 28, 2024
Blog | March 28, 2024
Blog | March 26, 2024
Blog | March 25, 2024
Blog | March 24, 2024
Blog | March 17, 2024
Blog | March 14, 2024
Blog | March 14, 2024
Blog | March 13, 2024
Blog | March 11, 2024
Blog | March 10, 2024
Blog | March 05, 2024
Blog | March 04, 2024
Blog | March 03, 2024
Articles | February 28, 2024
Blog | February 28, 2024
Blog | February 25, 2024
Blog | February 21, 2024
Blog | February 18, 2024
Blog | February 13, 2024
Blog | February 12, 2024
Blog | February 11, 2024
Blog | February 06, 2024
Blog | February 05, 2024
Blog | February 04, 2024
Blog | January 28, 2024
Blog | January 25, 2024
Blog | January 23, 2024
Blog | January 18, 2024
Blog | January 09, 2024
Blog | January 04, 2024
Blog | January 03, 2024
Blog | January 02, 2024
Blog | December 15, 2023
Blog | December 03, 2023
Blog | November 27, 2023
Blog | November 13, 2023
Blog | November 08, 2023
White Papers | November 01, 2023
Legal Insights for Manufacturing: Outlook for 2024

With each passing day it becomes more apparent the world that entered the COVID-19 pandemic is not the world that emerged from it.

Blog | October 30, 2023
Articles | October 20, 2023
Blog | October 18, 2023
Blog | October 11, 2023
Blog | September 26, 2023
Blog | September 18, 2023
Blog | September 17, 2023
Blog | August 28, 2023
Blog | August 23, 2023
Blog | August 20, 2023
Blog | August 17, 2023
Blog | August 17, 2023
Blog | August 14, 2023
Blog | August 01, 2023
Blog | July 31, 2023
Blog | July 19, 2023
Blog | July 16, 2023
Blog | July 12, 2023
Blog | July 07, 2023
Blog | July 04, 2023
Blog | July 02, 2023
Blog | June 26, 2023
Blog | June 24, 2023
Blog | June 17, 2023
Blog | June 11, 2023
Blog | June 06, 2023
Blog | June 05, 2023
Blog | May 30, 2023
Blog | May 28, 2023
Blog | May 21, 2023
Blog | May 14, 2023
Articles | May 12, 2023
Blog | May 08, 2023
Blog | May 07, 2023
Blog | May 02, 2023
Blog | April 30, 2023
Blog | April 24, 2023
Blog | April 21, 2023
Blog | April 20, 2023
Blog | April 17, 2023
Blog | April 16, 2023
Blog | April 13, 2023
Blog | April 09, 2023
Blog | April 04, 2023
Blog | April 01, 2023
Blog | March 30, 2023
Blog | March 26, 2023
Articles | March 2023
Blog | March 19, 2023
Blog | March 16, 2023
Blog | March 15, 2023
Blog | March 13, 2023
Blog | March 12, 2023
Blog | March 06, 2023
Blog | March 05, 2023
Blog | February 27, 2023
Blog | February 26, 2023
Blog | February 19, 2023
Blog | February 16, 2023
Blog | February 12, 2023
Blog | February 07, 2023
Blog | February 06, 2023
Blog | February 04, 2023
Blog | February 01, 2023
Blog | January 31, 2023
Articles | January 30, 2023
Blog | January 30, 2023
Blog | January 27, 2023
Blog | January 27, 2023
Blog | January 26, 2023
Blog | January 22, 2023
Insight | January 19, 2023
Blog | January 14, 2023
Blog | January 06, 2023
White Papers | January 04, 2023
Legal Insights for Manufacturing: Outlook for 2023

What manufacturers can expect in the new year.

Blog | December 22, 2022
Blog | December 21, 2022
Blog | November 25, 2022
Blog | November 03, 2022
Blog | October 29, 2022
Blog | October 17, 2022
Blog | October 01, 2022
Blog | September 01, 2022
Blog | August 29, 2022
Blog | August 24, 2022
Articles | August 23, 2022
Articles | August 18, 2022
Blog | August 01, 2022
Blog | July 20, 2022
Blog | July 08, 2022
Blog | June 25, 2022
Blog | June 21, 2022
Blog | June 03, 2022
Blog | May 29, 2022
Blog | May 24, 2022
Blog | May 16, 2022
Articles | May 11, 2022
Blog | May 08, 2022
Blog | May 05, 2022
Blog | May 02, 2022
Blog | April 28, 2022
Blog | April 24, 2022
Blog | April 21, 2022
Blog | April 17, 2022
Blog | April 13, 2022
Blog | April 10, 2022
Blog | April 05, 2022
Blog | April 04, 2022
Blog | March 29, 2022
Blog | March 27, 2022
Articles | March 25, 2022
Blog | March 23, 2022
Blog | March 22, 2022
Blog | March 21, 2022
Blog | March 16, 2022
Blog | March 15, 2022
Blog | March 14, 2022
Blog | March 13, 2022
Blog | March 09, 2022
Blog | March 03, 2022
Blog | February 28, 2022
Blog | February 23, 2022
Blog | February 21, 2022
Blog | February 20, 2022
Blog | February 17, 2022
Blog | February 16, 2022
Blog | February 13, 2022
Blog | February 10, 2022
Blog | February 09, 2022
Blog | February 06, 2022
Blog | February 03, 2022
Blog | February 02, 2022
Articles | February 01, 2022
Blog | February 01, 2022
Blog | January 31, 2022
Blog | January 31, 2022
Blog | January 27, 2022
Articles | January 25, 2022
Blog | January 23, 2022
Articles | January 18, 2022
Blog | January 17, 2022
Blog | January 16, 2022
Blog | January 10, 2022
Blog | January 09, 2022
Blog | January 03, 2022
Blog | December 24, 2021
Blog | December 20, 2021
Articles | December 09, 2021
Insight | December 07, 2021
Articles | December 01, 2021
Blog | November 21, 2021
Articles | November 19, 2021
Blog | November 01, 2021
Articles | October 14, 2021
Blog | September 29, 2021
Blog | September 22, 2021
Articles | September 15, 2021
Blog | September 11, 2021
Blog | September 09, 2021
Blog | September 07, 2021
Blog | August 11, 2021
Articles | August 03, 2021
Blog | July 26, 2021
Blog | July 21, 2021
Blog | July 15, 2021
Blog | July 15, 2021
Blog | July 14, 2021
Blog | July 13, 2021
Blog | July 07, 2021
Blog | July 06, 2021
Blog | June 23, 2021
Articles | June 21, 2021
Blog | June 13, 2021
Blog | June 09, 2021
Blog | June 08, 2021
Blog | June 08, 2021
Blog | June 06, 2021
Blog | June 04, 2021
Blog | May 31, 2021
Blog | May 26, 2021
Blog | May 25, 2021
Blog | May 23, 2021
Blog | May 19, 2021
Blog | May 18, 2021
Blog | May 16, 2021
Articles | May 13, 2021
Blog | May 12, 2021
Articles | May 11, 2021
Blog | May 09, 2021
Blog | May 07, 2021
Blog | May 02, 2021
Blog | April 29, 2021
Blog | April 29, 2021
Blog | April 27, 2021
Blog | April 26, 2021
Blog | April 21, 2021
Blog | April 19, 2021
Blog | April 18, 2021
Blog | April 13, 2021
Blog | April 12, 2021
Blog | April 12, 2021
Blog | April 04, 2021
Blog | March 29, 2021
Blog | March 28, 2021
Articles | March 23, 2021
Blog | March 23, 2021
Blog | March 22, 2021
Blog | March 20, 2021
Blog | March 19, 2021
Blog | March 17, 2021
Blog | March 15, 2021
Blog | March 14, 2021
Articles | March 11, 2021
Blog | March 09, 2021
Blog | March 07, 2021
Blog | March 04, 2021
Blog | March 03, 2021
Blog | March 02, 2021
Blog | March 01, 2021
Blog | February 19, 2021
Blog | February 18, 2021
Blog | February 04, 2021
Blog | February 03, 2021
Blog | February 02, 2021
Blog | February 01, 2021
Blog | January 31, 2021
Articles | January 28, 2021
Blog | January 28, 2021
Blog | January 27, 2021
Blog | January 24, 2021
Blog | January 20, 2021
Blog | January 13, 2021
Blog | January 09, 2021
Blog | December 27, 2020
Blog | December 21, 2020
Blog | December 17, 2020
Blog | December 16, 2020
Blog | December 16, 2020
Blog | December 15, 2020
Blog | December 10, 2020
Blog | December 09, 2020
Articles | December 01, 2020
Articles | November 20, 2020
Articles | November 18, 2020
Articles | November 17, 2020
Articles | November 12, 2020
Blog | November 10, 2020
Blog | October 30, 2020
Blog | October 12, 2020
Blog | October 05, 2020
Articles | October 02, 2020
Articles | September 29, 2020
Articles | September 23, 2020
Blog | September 22, 2020
Articles | September 18, 2020
Blog | September 18, 2020
Blog | September 16, 2020
Blog | September 13, 2020
Articles | September 11, 2020
Blog | September 08, 2020
Blog | September 05, 2020
Blog | August 31, 2020
Blog | August 19, 2020
Articles | August 18, 2020
Blog | August 17, 2020
Blog | August 14, 2020
Webinar | September 3, 2025
Advanced Threats, Proactive Solutions
Speaking Engagements | April 1, 2025
Speaking Engagements | September 18, 2024
Webinar | June 4, 2024
Analyzing the Colorado AI Act
Seminars | March 7, 2024
Colorado Priorities
Webinar | February 20, 2024
U.S. Privacy Law Update
Webinar | January 31, 2024
Legal Insights for Manufacturing
Speaking Engagements | December 7, 2023
Speaker, "2024's Data Privacy Laws," Osano Webinar
Speaking Engagements | June 28, 2023
Speaking Engagements | November 11, 2022
Speaking Engagements | September 21, 2022
Speaking Engagements | September 21, 2022
Speaking Engagements | March 11, 2022
Webinar | March 7, 2022
What is the Utah Consumer Privacy Act?
Speaking Engagements | October 23, 2020
Media Mentions | June 11, 2025
Media Mentions | May 14, 2025
Media Mentions | May 12, 2025
Media Mentions | May 01, 2025
Media Mentions | September 11, 2024
Media Mentions | August 26, 2024
Media Mentions | July 30, 2024
Media Mentions | July 19, 2024
Media Mentions | July 15, 2024
Media Mentions | April 25, 2024
Media Mentions | April 24, 2024
Media Mentions | April 23, 2024
Media Mentions | April 08, 2024
Media Mentions | April 03, 2024
Media Mentions | March 01, 2024
Media Mentions | September 07, 2023
Media Mentions | September 06, 2023
Media Mentions | August 22, 2023
Media Mentions | August 17, 2023
Media Mentions | August 14, 2023
Media Mentions | August 01, 2023
Media Mentions | July 31, 2023
Media Mentions | July 31, 2023
Media Mentions | June 13, 2023
Media Mentions | May 31, 2023
Media Mentions | May 17, 2023
Media Mentions | May 05, 2023
Media Mentions | May 03, 2023
Media Mentions | April 18, 2023
Media Mentions | March 29, 2023
Media Mentions | March 27, 2023
Media Mentions | March 27, 2023
Media Mentions | March 23, 2023
Media Mentions | March 22, 2023
Media Mentions | March 22, 2023
Media Mentions | March 20, 2023
Media Mentions | March 16, 2023
Media Mentions | March 16, 2023
Media Mentions | February 28, 2023
Media Mentions | February 20, 2023
Media Mentions | February 14, 2023
Media Mentions | January 30, 2023
Media Mentions | January 19, 2023
Media Mentions | January 04, 2023
Media Mentions | January 03, 2023
Media Mentions | January 03, 2023
Media Mentions | December 30, 2022
Media Mentions | November 11, 2022
Media Mentions | October 31, 2022
Media Mentions | October 21, 2022
Media Mentions | October 21, 2022
Media Mentions | October 03, 2022
Media Mentions | September 27, 2022
Media Mentions | September 21, 2022
Media Mentions | September 07, 2022
Media Mentions | August 30, 2022
Media Mentions | August 09, 2022
Media Mentions | July 21, 2022
Media Mentions | July 18, 2022
Media Mentions | May 31, 2022
Media Mentions | May 12, 2022
Media Mentions | May 12, 2022
Media Mentions | May 11, 2022
Media Mentions | May 06, 2022
Media Mentions | May 02, 2022
Media Mentions | April 29, 2022
Media Mentions | April 25, 2022
Media Mentions | April 18, 2022
Media Mentions | April 16, 2022
Media Mentions | April 13, 2022
Media Mentions | April 01, 2022
Media Mentions | March 29, 2022
Media Mentions | March 08, 2022
Media Mentions | March 03, 2022
Media Mentions | February 23, 2022
Media Mentions | February 22, 2022
Media Mentions | February 02, 2022
Media Mentions | February 01, 2022
Media Mentions | January 19, 2022
Media Mentions | January 18, 2022
Media Mentions | January 13, 2022
Media Mentions | January 03, 2022
Media Mentions | December 21, 2021
Media Mentions | June 23, 2021
Media Mentions | June 09, 2021
Media Mentions | June 08, 2021
Media Mentions | June 02, 2021
Media Mentions | May 27, 2021
Media Mentions | May 26, 2021
Media Mentions | May 13, 2021
News | April 28, 2021
Media Mentions | April 23, 2021
Media Mentions | April 14, 2021
Media Mentions | April 14, 2021
Media Mentions | March 24, 2021
Media Mentions | March 18, 2021
Media Mentions | March 05, 2021
Media Mentions | February 18, 2021
Media Mentions | February 16, 2021
Media Mentions | February 10, 2021
News | February 10, 2021
Media Mentions | February 04, 2021
Media Mentions | January 29, 2021
Media Mentions | January 21, 2021
Media Mentions | January 15, 2021
Media Mentions | December 24, 2020
Media Mentions | December 16, 2020
Media Mentions | September 29, 2020
Media Mentions | September 15, 2020

Key Contacts

View our entire team 
Navigating the maze.
Â鶹ʮÈýÅ®ÀÉ is a proud member of the International Association of Privacy Professionals.
Stay informed of the ever-evolving data privacy landscape.