Cybersecurity, Privacy & Data Protection

Our team provides a full array of services:

• Responding to data breaches, including managing crisis response, assessing legal obligations under U.S. laws and contractual commitments, engaging and managing forensic service providers, making all necessary breach notifications, and assisting with post-incident reviews and evaluations;
• Conducting internal investigations of potential data leaks, insider threats, thefts of confidential and proprietary information, cybersecurity noncompliance matters, and complaints involving suspected violations of the False Claims Act;
• Conducting cybersecurity, privacy impact, and AI risk assessments and advising corporate leaders on cybersecurity governance and risk management, including vendor and supply chain diligence;
• Advising organizations on cyber incident preparedness;
• Implementing insider threat mitigation strategies to protect intellectual property, network integrity, and ensure compliance with contractual obligations;
• Drafting privacy and information security governance policies and procedures and providing data security and privacy compliance counseling, including for businesses in industries with specialized privacy laws, such as financial services and healthcare;
• Representing organizations in government investigations and enforcement matters involving data privacy, cybersecurity compliance, and data breach response, including DOJ cyberfraud investigations for suspected violations of the False Claims Act and government contract cybersecurity requirements (i.e., DFARS Section 7012, NIST SP 800-171, CMMC);
• Advising and assisting on issues related to International Trade and Global Security;
• Assisting individual and corporate victims of cybercrime, identity theft, online fraud, cyberstalking/harassment, and defamation issues;
• Representing organizations in a wide variety of privacy, digital data, and cybersecurity litigation matters, including claims of unlawful surveillance, unauthorized data sharing with third-parties, and website tracking privacy violations;
• Responding to civil investigative demands and criminal subpoenas involving issues related to privacy, data protection, cybersecurity, and government contractual requirements such as compliance with the DFARS and FAR, negotiating favorable resolutions, and, when necessary, providing an aggressive defense to any government enforcement action.

Issues of data protection and privacy touch nearly everyone. Our clients come to us from all areas of the business, non-profit, and private sectors, including:

• Large corporations, financial institutions, health care, and biotech entities seeking to implement information security programs and privacy policies;
• Defense contractors that are required to implement cybersecurity measures on their network to safeguard technical data and controlled unclassified information under NIST SP 800-171 and DFARS 252.204-7012;
• Organizations and individuals that are under investigation or involved in a government enforcement action involving a data breach or claims of privacy and cybersecurity compliance violations;
• Businesses looking to safeguard their intellectual property and implement employee policies to minimize insider threats;
• Businesses that want to proactively conduct risk assessments and implement a robust data security and privacy governance program;
• Businesses assessing potential data security liability of merger or acquisition targets;
• Businesses and institutions that have experienced a data security incident;
• Individuals and businesses who need assistance ensuring proper vendor and supply chain diligence;
• Victims of cybercrime, theft of intellectual property, identity theft, or cyberstalking and harassment;
• Non-profit organizations that gather sensitive data and need assistance with regulatory compliance;
• Parties to litigation involving complicated digital data, privacy, and cybersecurity issues.