Privacy & Data Security: Cybersecurity | USA

Lisa Sotto continues to be renowned for her unparalleled skill in responding to data security incidents and breaches of privacy. She chairs the firm’s global privacy and cybersecurity practice and is the managing partner of the firm’s New York office.

Miriam Wugmeister is frequently engaged by multinational corporations and Fortune 500 companies to advise on compliance with privacy regulations globally and for representation in major FTC investigations. She is also cochair of the firm's global data, cyber and privacy group.

Andrew Serwin is accomplished in navigating data security incidents, overseeing technical investigations and responding to enforcement issues. His clients come from a range of sectors, including technology, energy and pharma. He is also the firm's US chair and global cochair for the data protection, privacy and security practice.

Benjamin Powell handles a wide range of incident response work, from the preparatory stages of planning and risk avoidance to internal and enforcement investigations. He is also cochair of the firm's cybersecurity and privacy practice, and the artificial intelligence practice.

David Lashway is a highly regarded representative for clients in cybersecurity regulatory investigations and frequently advises on data breach response. He also has cross-border capabilities. He is also co-leader of the firm’s global privacy and cybersecurity practice.

Edward McNicholas' leads the firm's global data privacy and cybersecurity practice. His practice incorporates both counseling and litigation, including investigations conducted by enforcement entities. Able to assist in privacy and cybersecurity matters across the globe, he has an extensive clientele list which includes technology companies, pharma companies, financial institutions, healthcare providers and e-commerce retailers.

Kimberly Kiefer Peretti is co-leader of the firm's privacy, cyber and data strategy team and national security and digital crimes team. She focuses her practice on cybersecurity counseling with notable expertise in HIPAA compliance. She draws on her valuable experience as a former cybercrime prosecutor at the Department of Justice. She is also active in dealing with healthcare data security incidents.

Luke Dembosky cochairs the firm's global data strategy and security practice. He draws from a great fund of experience as a former Deputy Assistant Attorney General for National Security to advise a clientele consisting of a number of household-name financial institutions. He has particular expertise in counseling on cyber-attack preparation and response.

Craig Hoffman co-leads the firm's digital risk advisory and cybersecurity team, and is distinguished by his wealth of experience in responding to information and data incidents. He is especially highly regarded for his representation of payment card providers.

David Navetta is well regarded for his experience in handling data protection issues, running the gamut from incident response to information transfers. He is equally adept at guiding clients through FTC investigations, the SEC's cyber security rule and cybersecurity risk management.

Erez Liebermann is cochair of the firm's technology group. He has extensive experience in supporting clients in global ransomware response. He also demonstrates strong capabilities in compliance counseling and handling internal investigations.

Heather Egan of Morgan, Lewis & Bockius counsels clients on the full spectrum of transactional concerns pertaining to privacy and data security. She boasts specific experience in advising clients in the context of ransomware attacks as well as on adtech matters.

Rajesh De brings expertise gained in the MOD, DOJ and NSA to private practice. As a result, his data security practice revolves around matters of incident response and preparedness, with particular cybersecurity expertise. He leads the firm's global cybersecurity and data privacy practice, as well as the national security practice.

Theodore Kobus is noted as a market-leading expert in cybersecurity issues, including responding to high stakes data breaches.

Alfred Saikali is chair of the firm's privacy and cybersecurity practice, and he frequently handles data security compliance matters in addition to acting in privacy class actions. His regulatory practice encompasses both domestic and global matters.

Andrew Tannenbaum is the global co-head of cybersecurity at A&O Shearman. He leverages his extensive prior in-house and government experience to lead cybersecurity advice, investigations, and strategies for domestic and international clients. He is also noted for his compliance advisory work regarding the DOJ’s Bulk Sensitive Data Rule.

Michelle Reed is cochair of the firm's data privacy and cybersecurity group, and has noted experience in cybersecurity matters. She is also often sought out by clients to provide privacy compliance advice.

Natasha Kohne has a well-rounded privacy practice with strengths in litigation, compliance counseling and data breach matters. She has notable expertise in advising on CCPA and is co-head of the firm’s cybersecurity, privacy and data protection practice.

Nicole Friedlander of Sullivan & Cromwell is recognized for guiding clients through the aftermath of cyber-attacks and data breaches, including internal investigations and SEC inquiries. She is co-head of the firm's national security and cybersecurity practices.

Phyllis Sumner of King & Spalding serves as the firm's chief privacy officer and leads the firm's data, privacy and security practice. She is a noted incident response and litigation practitioner. She advises many well-known clients across a range of sectors including leisure and finance. She also has strong experience in privacy counseling on CCPA and Schrems compliance.

Anna Rudawski of A&O Shearman represents clients, notably in the life sciences and healthcare industries, facing various privacy and cybersecurity challenges. She focuses on providing advice regarding HIPAA and compliance with federal, state and international regulations and investigations.

Avi Gesser is well known for advising large tech companies on AI readiness. He also has extensive experience of assisting clients in incidents stemming from both data breaches and ransomware events. He cochair's the firm’s data strategy and security group and leads the firm’s artificial intelligence practice.

Brenda Sharton of Dechert has a very diverse privacy and data security practice with strengths in investigations, litigation and cyber-attack matters. She is managing partner of the Boston office and is the global chair of the firm's cyber, privacy and AI practice.

Global head of cybersecurity and privacy, Chris Cwalina is well regarded in the cybersecurity sphere, with significant experience of responding to cyber incidents with global clients.

David Simon of Skadden is experienced in dealing with a wide range of cybersecurity issues, including assessing incident response plans and responding to large ransomware attacks. He serves as co-head of the firm's global cybersecurity and data privacy practice.

Evan Wolff is cochair of the firm's cybersecurity, privacy and data protection practice and is often engaged by Fortune 100 companies for his work regarding cybersecurity and data breaches, including incident responses.

John Carlin of Paul, Weiss, Rifkind, Wharton & Garrison is the chair of the investigations practice group and the national security practice group and cochair of the cybersecurity and data protection practice. He has a broad-ranging practice that involves providing ransomware and incident response counsel, as well as representing clients in class actions relating to alleged violations of wiretapping laws.

John Woods is held in high regard for his ability to assist clients on high profile cyber incidents. He is notably adept at advising clients on matters related to ransomware.

Jud Welle assists clients stemming from a broad spectrum of sectors, including financial services, healthcare and technology. He has extensive experience of providing counsel on incident response, as well as regulatory response and compliance.

Lisa Ropple is regularly sought out by clients to advise on significant ransomware incidents and breach issues. She also displays strength in litigation and privacy compliance counseling.

Michael Bahar is co-head of the firm's global litigation group and co-leads the global cybersecurity and data privacy and congressional investigations practices. He is a highly regarded practitioner with considerable experience advising clients on cross-border privacy laws. He has recently handled data breaches and investigations.

Serrin Turner frequently acts for major tech-driven businesses in regulatory investigations, complex cybercrime cases and class actions as part of his broader data security practice.

Adam Hickey leverages his experience at the US Department of Justice in advising private companies on cybersecurity investigations and ransomware attacks. He is also equally adept at representing his clients through data breach class actions and litigations.

Beth Waller is chair of Wood Rogers' cybersecurity and data privacy practice group and assists clients in the technology, education and government sectors in cybersecurity incident response and privacy contract negotiations.

Eric Setterlund of Bradley Arant Boult Cummings is the cochair of the cybersecurity and privacy practice group. He is routinely called upon to represent clients during complex cyber attacks and alleged violations of HIPAA.

Erin Jane Illman is co-chair of the cybersecurity and privacy practice. She has a breadth of knowledge on US and global privacy and data protection laws. Erin represents clients in matters regarding cybersecurity, trade secret theft, security incidents and breaches and has a diverse clientele including those in the technology and e-advertising sectors.

Jena Valdetero is co-chair of the firm's data, privacy and cybersecurity practice. Jena offers extensive experience handling data breaches, class action lawsuits, incident responses, compliance programs and cyber risk and ransomware advice.

Linn Freedman is chair of Robinson & Cole's data privacy and cybersecurity practice. She counts data breach response and defending resulting privacy claims as important pillars of her practice, which regularly sees her acting for healthcare businesses.

Megan Brown cochairs the firms privacy, cyber and data governance practice. As a former senior DOJ official, Megan is well-versed in representing clients in congressional investigations and proceedings before the FTC. Brown is very able to handle ransomware attacks and cybersecurity governance.

Michael Hochman represents his clients in cybersecurity related investigations and compliance with regulations across multiple jurisdictions.

Theodore Augustinos represents clients through complex cybersecurity compliance, breach and incident response and is well-versed in the CCPA.

Timothy Howard, former chief of complex frauds and cybercrime for the US Attorney's office, has an extensive background in privacy and data protection, particularly regarding white-collar crime. He regularly represent companies facing data breaches and internal investigations by the DOJ, SEC and FTC. He currently serves as the firm's global co-head of data and technology practice group.

William Daugherty is head of cybersecurity for Norton Rose Fulbright and is highly regarded by clients for his work in data protection and privacy. Notably, he has extensive experience providing incident response, dispute and resolution services and risk advisory.

William Ridgway is the co-head of Skadden’s global cybersecurity and data privacy practice. He leverages his trial experience in leading class‑action litigation, data privacy matters, and BIPA disputes. He has represented clients before the DOJ, SEC and CPPA.

Maeve Malik has a burgeoning practice in advising clients in global privacy compliance programs as well as cybersecurity incident responses.

Alexis Potter of A&O Shearman is recognized for guiding clients on compliance with AI and cybersecurity programs and training.