Privacy & Data Security: The Elite | Global

The Covington & Burling team is well versed in domestic and cross-border privacy and data security issues. An adept team providing tailored and sophisticated privacy counsel for clients in industries that include food and drugs, IT, telecom and healthcare. Possesses additional expertise in big data, digital marketing and financial services. Strong record for helping clients navigate challenging FTC investigations. Handles the risk assessment of third-party platforms, with compliance expertise regarding COPPA. Showcases additional strength in reporting and responding to data breaches.

Hogan Lovells remains one of the country's preeminent privacy and data security practices. A highly talented roster of attorneys advising clients on major data breaches and complex policy matters across a multitude of industries, including retail, automotive and media. Particular expertise in healthcare privacy issues such as HIPAA compliance, wearable technology and medical data cyber-attacks. Additionally capable in a regulatory capacity, especially relating to the EU General Data Protection Regulation (GDPR), working in conjunction with the firm's European offices. Skilled at representing clients in investigations conducted by the FTC and other enforcement bodies.

Hunton Andrews Kurth boasts a dedicated data breach group with a wealth of experience handling high-stakes cyber events. Maintains an excellent reputation for its information governance practice. Also sought after for international data transfer, privacy compliance and regulatory investigations expertise. Operates across numerous industries including technology, consumer products, healthcare, retail and financial services. Noted proficiency on cybersecurity risks associated with blockchain technology in addition to the GDPR and CCPA regulations.

Morrison Foerster is a market-leading data security and privacy firm, offering the full suite of privacy law services, including data breach notification and enforcement. Well versed in creating tailored privacy policies for clients. Possesses significant experience advising on FTC and state privacy regulatory compliance matters. Works with notable established and emerging life sciences and technology companies. Often provides counsel to clients on the privacy aspects of major M&A transactions.

The Baker McKenzie team continues to provide clients with high-caliber cybersecurity and data protection services both domestically and globally. Singled out for its specific focus on crisis management, performing advisory roles and privacy policy. Known for its excellent handling of privacy matters in the healthcare and financial services industries. Also offers advice on data issues arising during complex transactions and well regarded for its international privacy practice, with special strength in cybersecurity.

Orrick Herrington has an impressive integrated practice and it offers clients the full gamut of services across privacy and data security from advisory and regulatory compliance to high-profile litigation and enforcement. Growing team with the ability to act for clients on national and international mandates, tapping into the firm's global network. Particularly adept at advising clients in the technology and education sectors in addition to clients in the financial services industry. Extensive experience advising clients on FTC-related matters.

Wilson Sonsini demonstrates impressive capabilities in class actions and government investigations, with particular experience in matters concerning the FTC and state attorney generals. Regularly advises clients on implementing privacy policies and data security compliance. Also well regarded for its expertise in M&A activity with data transfer requirements, and transactions in which data is considered an asset. Noted for its expertise on issues concerning the CCPA, BIPA, COPPA and VPPA. Experienced in matters pertaining to national security, such as handling requests for information under the Foreign Intelligence Act and National Security Letters.

Debevoise & Plimpton has a well-regarded team that is noted for its adept handling of cyber matters, with particular experience with data breach and incident response matters. Regularly called upon by clients to advise on GDPR and CCPA. Additionally recommended for its transactional expertise, providing a popular choice for M&A due diligence. Able to offer clients a globally integrated service through its international network of offices.

Latham & Watkins has a notably strong privacy breach and litigation shop with additional compliance capabilities. Serves a clientele of both emerging and established companies in data-heavy industries, including adtech and social media. Seasoned in guiding clients through substantial enforcement proceedings brought by regulators.

Sidley Austin has an excellent practice that is recognized for its litigation strengths and compliance expertise, maintaining a respected incident response and data breach team. Offers advice to clients on a wide array of issues, including big data, cybersecurity and cross-border information flow matters. Broad-ranging sector expertise includes consumer products manufacturing, financial services, retail, technology and transportation. Works with the firm's well-regarded corporate practice, conducting privacy and cybersecurity diligence for M&A.

Gibson, Dunn & Crutcher has a highly regarded privacy and cybersecurity offering with notable strength in contentious matters. Regularly represents household-name companies in the technology sector in defending class action privacy lawsuits. Thoroughly experienced in acting for clients in major regulatory enforcement proceedings and investigations.

Hintze Law is a highly regarded boutique firm, particularly noted for its experience in handling cutting-edge technology and emerging issues impacting information security, such as automatic tracking, biometrics and facial recognition. Well versed in establishing compliance regimes in addition to responding to data breaches and ensuing investigations. Also routinely advises clients on FTC compliance and the ongoing impact of CCPA. Well reputed by healthcare and biotech clients for advising on relevant data privacy and security laws such as HIPAA and COVID-19 pandemic responses and monitoring.

InfoLawGroup has a well-established data privacy and security practice. Its attorneys have expertise in advising media and technology companies on national and international privacy law compliance, including children's privacy and wiretapping laws in the US. The firm has further experience of providing counsel on GDPR. The team is also adept at establishing privacy programs and assisting on biometrics issues under BIPA for large clients.

Mayer Brown has a major practice offering skillful representation across a broad array of privacy issues. It is particularly noted for its expertise in national security matters. Often represents industry-leading technology companies, automotive companies and financial institutions in regulatory compliance, incident response and litigation.

Ropes & Gray has a well-regarded data security team boasting capabilities in both regulatory compliance and breach response. Works with household-name clients across a range of industries, with notable strength in the private equity and leisure sectors. Often turned to for assistance with diverse privacy legislation, including GDPR, CCPA and HIPAA compliance. Also widely regarded for its strength in data breach litigation.