Client feedback, leading legal directory
They handled a serious incident at 2 a.m. as if it were their own, and the regulator conversations went well.
Client feedback, leading legal directory
Their cookie and tracking advice has held up through two rounds of regulatory review.
Client feedback, leading legal directory
The team gives practical privacy advice that engineers and marketers can actually follow.
Client feedback, leading legal directory
Their cross-border data transfer analysis was thorough and clear enough to put in front of our board.
Client feedback, leading legal directory
Deep knowledge of GDPR enforcement, and equally strong on the fifty-state patchwork in the US.
Client feedback, leading legal directory
They steered us through a regulator investigation with real tactical skill.
Client feedback, leading legal directory
A team that understands both the law and the architecture underneath it.
Client feedback, leading legal directory
Consistently ahead of new developments, from state laws to the EU Data Act.
Client feedback, leading legal directory
They embedded privacy into our M&A diligence in a way that actually informed price.
Client feedback, leading legal directory
Calm, fast and organized in a ransomware event involving multiple regulators.
Overview
Our highly ranked, interdisciplinary Privacy & Cyber practice delivers full-spectrum legal support around the globe, to solve today's complex and dynamic compliance, regulatory, litigation and transactional challenges. Led from Washington, D.C. by Tomás Ellery-Vance, the practice includes lawyers in the United States, the United Kingdom, the European Union and Asia-Pacific.
The legal environment is fragmented and fast-moving. In Europe, the GDPR and ePrivacy rules are being enforced alongside the Data Act, the Digital Services Act and the AI Act, and data protection authorities are focused on consent, cookies, profiling and international transfers under the EU-US Data Privacy Framework. In the United States, comprehensive privacy laws are now in force in around twenty states, California regulators are active on opt-out signals and data broker rules, and children's and health data laws are widening. In the UK, the Data (Use and Access) Act has reshaped aspects of the regime.
We help clients build programs that work in practice, respond when something goes wrong, and defend them when regulators or plaintiffs come calling.
Counseling & Compliance Strategies
We design privacy and data governance programs for global organizations, covering notices and consent, cookies and adtech, data subject rights, vendor management, impact assessments, data localization and children's data. We advise product and engineering teams on privacy by design, including for AI systems and retail media and loyalty programs.
Regulatory & Litigation Defense
We represent clients before the FTC, state attorneys general, the California Privacy Protection Agency, the UK Information Commissioner's Office and EU data protection authorities, and defend class actions under wiretap, biometric privacy and pixel tracking theories.
Cyber Incident Response
Our incident response lawyers are available around the clock to run privileged investigations, coordinate forensic vendors, manage notification obligations across jurisdictions, handle SEC cybersecurity disclosure analysis, and engage regulators and law enforcement.
Data-Driven Transactions
We advise on data acquisitions and licensing, privacy diligence in M&A, data-sharing agreements, cloud and AI service contracts, and the structuring of data-intensive businesses, including carve-outs and cross-border integrations.