Privacy & Data Management

Interdisciplinary team that understands local compliance requirements and risks

• Cross-industry experience and multidisciplinary approach
• Senior in-house compliance and privacy legal counsel at global corporation
• Former government prosecutor and military service
• Team of Certified Information Privacy Professionals
• Enterprise-wide electronic discovery counsel for clients with global operations
• Class action and multidistrict litigation defense counsel

Our team provides experience, knowledge, and cost efficiencies

Our experience across a broad array of industries provides a balanced perspective for the varied approaches to protecting and managing data assets. Because the legal and regulatory requirements differ between industries, we are positioned to apply multiple solutions and give counsel in multiple scenarios in vastly different settings and organizations.

In addition to our knowledge and experience across multiple industries, our relationships with forensic investigators, privacy and data security consultants, insurance providers, and regulators enable us to serve our clients beyond the application of law to facts.  Our team includes privacy and data management thought leaders, published authors,  and leaders in the field who participate in national and local industry groups and legal organizations.

Timely and strategic advice on response and risk management strategies

• Integrated approach – using an integrated approach to potential issues, incorporating perspectives from our attorneys in related practice areas such as technology, insurance, litigation, and corporate matters
• Third party vendor assistances – assisting clients in hiring external forensic investigators to discreetly and thoroughly document and assess the facts, scope of the breach, and potential liability
• Crisis management – providing crisis management when a security incident or data breach occurs with a view toward issues to consider regarding potential related litigation
• Public relations strategy – offering public relations strategy including timing, media approach, and content
• Security incident investigations -- conducting time-sensitive investigations of security incidents, including assisting clients with their internal investigations
• Internal and external incident response and communications plans – preparing internal and external incident response and communication plans with your board of directors, customers, and law enforcement
• Litigation plans – developing strategic litigation plans and budgets to help “right size” the defense of data breach matters

Privacy and data management services for clients across industry sectors

• Large financial institutions
• Small community banks
• Universities and non-profit educational consortium
• Automobile manufacturers
• International construction company
• State government and state agencies
• HealthCare information technology
• International travel, hotel, and leisure
• Payment processors

Following is a selected sampling of matters and is provided for informational purposes only. Past success does not indicate the likelihood of success in any future matter.

• Counseled international manufacturers on development of global privacy and data security policies and data management program
• Counseled international company seeking to obtain Privacy Shield Certification 
• Counseled franchisor through discovery of malware compromising credit card processing of the company and multiple franchise locations through all stages of data breach response 
• Counseled compromised POS payment processing service provider through data breach notification to POS service provider’s client customers 
• Counseled financial institution and payment processing vendor through all stages of data breach incident involving the loss of sensitive customer data, including incident analysis and breach containment, incident disclosure (such as notification in compliance with all regulatory requirements), loss mitigation, and remediation customized to meet each client’s specific business and industry requirements 
• Counseled major national retailer through a security incident investigation involving the discovery of malware potentially compromising all credit card processing of the company, compliance, risk assessment, and remediation
• Counseled an international construction company and hotel portfolio management company through a breach investigation, response, and notification involving the theft of employee W-2 tax information obtained as a result of phishing scheme
• Counseled the domestic subsidiary of a major international company through a security incident investigation involving employee theft and misappropriation of customer credit card information