Aaron Charfoos

Aaron Charfoos is co-chair of the Data Privacy and Cybersecurity Group at Paul Hastings and chair of the Chicago Litigation Department. He is an accomplished cybersecurity, privacy, class action and data protection trial lawyer. Aaron has litigated a variety of privacy and cybersecurity cases including data breach class actions, Video Privacy Protection Act (VPPA), Illinois Biometric Information Privacy Act (BIPA), California Invasion of Privacy Act (CIPA) and other pixel and third-party tracking technology cases. Aaron also defends clients in regulatory investigations brought by various U.S. and international regulatory bodies.

He has also guided his clients through numerous data breaches, including breaches involving tens of millions of impacted individuals. Aaron is particularly skilled in guiding clients through cybersecurity vulnerability disclosures, including the Meltdown and Spectre computer chip vulnerabilities, supply chain interdictions, and various other matters, some of which have involved both congressional and regulatory investigations.

Building on this knowledge of post-breach risks, Aaron helps companies in numerous industries — including healthcare, financial services, technology, and consumer products — to develop global privacy and data security programs. This includes compliance with the SEC’s new rules for public company reporting related to cybersecurity, EU’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), Illinois’ Biometric Information Privacy Act (BIPA), the Video Privacy Protection Act (VPPA) and other worldwide privacy regimes.

Northwestern University Law School, J.D. (cum laude)

Northwestern University, A.B. (with honors)