David Lashway

Practice Areas

DAVID LASHWAY is widely recognized as a leading adviser for crisis management, cybersecurity, data security incidents, misinformation, trade secret theft, and related investigation and litigation matters. Advocacy on behalf of his clients has earned him numerous acknowledgements as one of the leading lawyers globally for cybersecurity law. David has advised a diverse range of private and public organizations on significant and material cybersecurity incidents across almost every critical infrastructure sector, including financial services, energy, manufacturing, technology, water, defense, municipal government, retail, transportation, and hospitality. He has significant experience in addressing election security and misinformation-related issues and was deeply involved in the investigations into the 2016 and 2020 actions targeting various U.S. political parties. He has served as the lead lawyer advising on the legal response to operationally impactful malware for a number of Fortune 500 entities, and led the incident response, associated investigations and litigations for several companies impacted by the NotPetya malware incident. He routinely leads responses to ransomware-related matters and is at the forefront of emerging issues posed by AI and generative AI-related technologies. Clients also turn to David for guidance on some of their most significant transactional matters. He has led due diligence on several of the largest recent corporate transactions in the last decade, and regularly advises companies through complex CFIUS issues. David also serves as lead counsel on matters for organizations facing difficult regulatory, congressional, and public policy issues across a range of industry sectors and subjects. David is co-chair of Sidley’s top ranked global Privacy and Cybersecurity practice and a member of the firm’s top ranked Crisis Management and Strategic Response team.