Our team provides the following services:

• Drafting privacy and information security policies and procedures and providing privacy compliance counseling, including for businesses in industries with specialized privacy laws, such as financial services and health care;
• Responding to data breaches, including assessing legal obligations under U.S. regulations and contractual commitments, engaging and managing forensic service providers, and assisting with post-incident reviews and evaluations;
• Conducting internal cybersecurity legal assessments and due diligence on potential merger or acquisition targets;
• Drafting confidentiality and data security provisions for employment agreements and vendor contracts;
• Implementing insider threat mitigation strategies to protect intellectual property and network integrity;
• Advising and assisting defense contractors on cybersecurity issues under government contracts;
• Advising and assisting on issues related to International Trade and Global Security;
• Assisting victims of identity theft, misuse of social media, and internet defamation issues;
• Responding to subpoenas for digital data and representing parties in litigation involving cybersecurity incidents or complex digital data issues;
• Responding to administrative inquiries and criminal subpoenas, negotiating non-prosecution resolutions, and when necessary, providing an aggressive defense to any criminal enforcement action;
• Providing for electronic password storage and retrieval in estate plans; and
• Drafting legislation regarding cyber law, privacy, and data security.

Issues of data protection and privacy touch nearly everyone these days. Our clients come to us from all areas of the business, non-profit, and private sectors, including:

• Large corporations, financial institutions, and health care entities seeking to implement information security programs and privacy policies;
• Defense contractors that are required to implement cybersecurity measures on their network to safeguard technical data and controlled unclassified information under NIST 800-171 and DFARS 252.2-4-7012;
• Businesses looking to safeguard their intellectual property and implement employee policies to minimize insider threats;
• Businesses assessing potential data security liability of merger or acquisition targets;
• Businesses and institutions that have experienced a cybersecurity incident;
• Individuals and businesses entering into vendor contracts;
• Victims of identity theft or misuse of social media;
• Families settling estates who need post-mortem access to their loved one’s data;
• Non-profit organizations that gather sensitive data;
• Parties to litigation involving complicated digital data, privacy, and cybersecurity issues;
• Organizations looking to advance legislation regarding cyber law, privacy, and data security