Privacy & Data Security: Cybersecurity | USA

Stewart Baker of Steptoe & Johnson focuses on the intersection between data protection and national security law, particularly drawing from his previous government experience working for the Department of Homeland Security.

"Lisa is one of the best data privacy and data security lawyers in the United States. She is easy to speak with, extremely knowledgeable, very smart and kind."

Alan Charles Raul attracts praise for his vast experience in the privacy and data security space, often advising corporate clients on regulatory compliance and data breach response. He is also known for his significant contribution to federal privacy legislation.

Andrew Serwin is accomplished in navigating data security incidents and responding to enforcement issues.

Benjamin Powell handles a wide range of incident response work, from the preparatory stages of planning and risk avoidance to internal and enforcement investigations.

Kimberly Kiefer Peretti focuses her practice on cybersecurity counseling, with notable expertise in HIPAA compliance. She draws on her valuable experience as a former cybercrime prosecutor at the Department of Justice.

Luke Dembosky draws from a great fund of experience as a former Deputy Assistant Attorney General for National Security to advise a clientele consisting of a number of household-name financial institutions. He has particular expertise in counseling on cyber-attack preparation and response.

Miriam Wugmeister is frequently engaged to advise on compliance with privacy regulations globally and for representation in major FTC investigations.

Boris Segalis is well known for his experience representing clients in government investigations and frequently provides regulatory advice to developers of new technologies, including AI.

Edward McNicholas' practice incorporates both counseling and litigation, including investigations conducted by enforcement entities.

Heather Egan counsels clients on the full spectrum of transactional concerns pertaining to privacy and data security. She boasts specific experience in advising clients in the context of ransomware attacks as well as on adtech matters.

Jennifer Archie's practice runs the gamut of contentious and advisory privacy and data protection considerations; she combines regulatory advice with class action defense.

Rajesh De brings expertise gained in the MOD, DOJ and NSA to private practice. As a result, his data security practice revolves around matters of incident response and preparedness, with particular cybersecurity expertise.

Theodore Kobus is noted as a market-leading expert in cybersecurity issues, including responding to high-stakes data breaches.

Alfred Saikali frequently handles data security compliance matters in addition to acting in privacy class actions. His regulatory practice encompasses both domestic and global matters.

Antony Kim regularly advises clients on cybersecurity preparedness, breach responses and regulatory investigations.

Aravind Swaminathan is formidable in assisting clients with both the noncontentious and litigious elements of cyber-attacks and security breaches, including resulting class actions.

Craig Hoffman is distinguished by his wealth of experience in responding to information and data incidents. He is especially highly regarded for his representation of payment card providers.

David Lashway is a highly regarded representative for clients in cybersecurity regulatory investigations and frequently advises on data breach response.

David Navetta is well regarded for his experience in handling data protection issues, running the gamut from incident response to information transfers. He is equally adept at guiding clients through FTC investigations.

Erez Liebermann has extensive experience in supporting clients in global ransomware response. He also demonstrates strong capabilities in compliance counseling and handling internal investigations.

James Garland's practice is fortified by his background in working at the Department of Justice. He regularly brings this experience to bear in the area of data access disputes concerning national security and rights to protect data.

Kristen Mathews is a highly regarded attorney, noted for her standout experience in the creation of customized compliance programs, including breach response planning.

Randy Sabett comes highly recommended for his contribution to the cybersecurity sphere, routinely advising a broad range of clients on data breaches, regulatory investigations and compliance issues.

James Pastore boasts expertise in a range of contentious and post-crisis matters, including class action litigation and data breach response.

Michelle Reed has noted experience in cybersecurity matters. She is also often sought out by clients to provide privacy compliance advice.

Natasha Kohne has a well-rounded privacy practice with strengths in litigation, compliance counseling and data breach matters. She has notable expertise in advising on CCPA.

Phyllis Sumner of King & Spalding is a noted incident response and litigation practitioner. She advises many well-known clients across a range of sectors including leisure and finance. She also has strong experience in privacy counseling on CCPA and Schrems compliance.

Serrin Turner frequently acts for major tech-driven businesses in regulatory investigations and class actions as part of his broader data security practice.

Andreas Kaltsounis is the co-lead of the digital risk advisory and cybersecurity team. He is noted for his ability to assist clients facing ransomware attacks and regulatory investigations, among other issues.

Avi Gesser is well known for advising large tech companies on AI readiness. He also has extensive experience of assisting clients in incidents stemming from both data breaches and ransomware events.

Brenda Sharton of Dechert has a very diverse privacy and data security practice with strengths in investigations, litigation and cyber-attack matters.

Global co-head of information governance, privacy and cybersecurity, Chris Cwalina is well regarded in the cybersecurity sphere, with significant experience of responding to cyber incidents with global clients.

Colleen Theresa Brown has a strong privacy practice managing data breach issues and litigation. She also has experience of working on privacy matters following acquisitions.

Colman McCarthy has a growing practice in privacy compliance counseling on CCPA issues. He is also experienced in advising clients on the steps to take in readiness and response to data breach incidents.

David Simon is experienced in dealing with a wide range of cybersecurity issues, including assessing incident response plans and responding to large ransomware attacks.

Dominic Paluzzi of McDonald Hopkins is the cochair of the data privacy and cybersecurity group. He is notably adept at handling incident response following data security incidents on behalf of clients from a range of sectors, including retail, healthcare and technology.

Eric Setterlund of Bradley Arant Boult Cummings is the cochair of the cybersecurity and privacy practice group. He is routinely called upon to represent clients during complex cyber attacks.

John Carlin of Paul, Weiss, Rifkind, Wharton & Garrison is the cochair of the cybersecurity and data protection practice. He has a broad-ranging practice that involves providing ransomware and incident response counsel, as well as representing clients in class actions relating to alleged violations of wiretapping laws.

John Thomas Malatesta handles a wide spectrum of cybersecurity issues including class actions and investigations. He also has notable experience of responding to ransomware attacks.

John Woods is held in high regard for his ability to assist clients on high-profile cyber incidents. He is notably adept at advising clients on matters related to ransomware.

Jud Welle assists clients stemming from a broad spectrum of sectors, including financial services, heathcare and clean energy. He has extensive experience of providing counsel on incident response, as well as regulatory response and compliance.

Linn Freedman of Robinson & Cole counts data breach response and defending resulting privacy claims as important pillars of her practice, which regularly sees her acting for healthcare businesses.

Lisa Ropple of Jones Day is regularly sought out by clients to advise on significant ransomware incidents and breach issues. She also displays strength in litigation and privacy compliance counseling.

Melissa Krasnow of VLP Law Group has an impressively well-rounded privacy practice covering counseling on issues such as CCPA, HIPAA and COPPA, as well as handling data breach incidents and enforcement matters.

Michael Bahar is a highly regarded practitioner with considerable experience advising clients on cross-border privacy laws. He has recently handled data breaches and investigations.

Michelle Visser is equally capable in both compliance and enforcement elements of privacy regulation. She has strong expertise in BIPA litigation matters.

Nicole Friedlander of Sullivan & Cromwell is recognized for guiding clients through the aftermath of cyber-attacks and data breaches, including internal investigations and SEC inquiries.

Ronald Lee is particularly well known for his national security expertise honed in the Department of Justice. This enables him to provide data protection and cybersecurity advice to clients in sensitive sectors, including defense.

Matthew Kelly has notable strength in advising clients on the SEC's new cybersecurity rule, among other issues. He is also adept at assisting with complex AI-related matters.