We guide clients through complex global privacy laws and help build sustainable compliance programs. This includes:

• Conducting privacy audits and gap assessments
  Designing and implementing compliance programs for GDPR, CCPA/CPRA, HIPAA, COPPA, FERPA, and PIPEDA
• Drafting and updating privacy policies, data transfer agreements, and corporate governance policies
  Advising on emerging state, federal, and international privacy requirements
• Supporting vendor due diligence and contract negotiations to address privacy and data protection risks
• Advising on “bring your own device,” social media, and employee monitoring issues

We help companies prepare for, respond to, and recover from cybersecurity incidents. This includes:

• Developing and testing incident response and breach notification plans
• Assisting with data breach response, notification obligations, and regulatory engagement
• Advising on technical and organizational security measures, including data encryption and access controls
• Coordinating responses to ransomware, phishing, and other cybersecurity attacks
• Engaging with regulators, law enforcement, and affected business partners during incident response
• Managing post-incident remediation, audits, and lessons-learned reviews

We advise on privacy and data security issues in technology development, product launches, and global operations. This includes:

• Counseling on privacy implications of mobile devices, apps, and cross-device tracking
• Structuring cross-border data transfers and cloud service arrangements
• Advising on AI, biometrics, and other emerging technologies with heightened privacy concerns
• Supporting clients entering new markets with country-specific privacy compliance strategies

We integrate privacy and data security expertise into deals, financings, and vendor relationships. This includes:

• Conducting privacy and data security due diligence in mergers, acquisitions, and investments
• Advising on data licensing, sharing, and monetization agreements
• Negotiating data protection provisions in SaaS, cloud, and outsourcing contracts
• Assessing privacy and security risks in strategic partnerships and joint ventures
• Counseling investors on portfolio company data compliance risks and mitigation strategies