Practice Areas
ALAN RAUL is the founder of Sidley’s highly ranked global Privacy and Cybersecurity practice and a member of the firm’s top ranked Crisis Management and Strategic Response team. Alan also teaches “Digital Governance” and “TechReg” as a Lecturer at Harvard Law School. He represents companies on U.S. and international privacy, cybersecurity, artificial intelligence, and technology issues. Alan advises on global regulatory compliance, data breaches, and crisis management. He also focuses on issues concerning national security, constitutional, and administrative law. Alan handles enforcement, litigation and public policy issues involving the FTC, State Attorneys General, SEC, DOJ, FBI, DHS/CISA, the intelligence community, as well as other federal, state, and international agencies. He advises companies and financial sponsors regarding transactions involving cybersecurity, digital and communication technologies and data-centric business models, and related due diligence. Alan has represented the securities industry trade association (and certain other financial trade associations) regarding the SEC’s cybersecurity rulemakings with respect to publicly traded companies, broker-dealers, and non-public personal financial information held by SEC-registered entities. In a significant matter implicating international data transfers, Alan is representing a major tech company in litigation before European agencies and courts.
Alan also represents a number of leading technology and internet companies whose devices, software, or users have been exploited by state-sponsored threat actors. Such events typically involve extensive coordination with U.S. and international law enforcement, cybersecurity and regulatory agencies, and intelligence services. Cyber crises often involve managing various legal, regulatory, B2B, and consumer risks as well as offering advice regarding a broad range of corporate communications and public messaging. He represented the internet technology company that collaborated successfully with the U.S. and UK governments to defend against and take down the Russian GRU’s malicious Cyclops Blink malware before the Ukraine invasion.
