- Data Privacy
- AI Governance & Regulation
- Cybersecurity
- Technology Transactions
- Cross-Border Data
- Regulatory Enforcement
- Industries
Data Privacy & Compliance
Sustainable privacy programs designed for your business, your industry, and the jurisdictions you operate in.
Services
- Privacy program development and implementation
- Data mapping and records of processing
- Data protection and privacy impact assessments
- Data governance strategy
- Privacy notices and internal policies
- Data subject and consumer rights processes
- Website tracking, cookie, and consent compliance
- Privacy-by-design reviews for products and features
- Privacy training for leadership and staff
Laws and frameworks
- EU and UK General Data Protection Regulation (GDPR)
- US state privacy laws, including the CCPA/CPRA
- Fair Credit Reporting Act (FCRA)
- Driver’s Privacy Protection Act (DPPA)
- Canadian privacy law, including PIPEDA and Québec’s Law 25
- Latin American data protection laws, including Brazil’s LGPD
- Southeast Asian data protection laws, including Singapore’s PDPA
- Biometric privacy laws
- ISO/IEC 27701
AI Governance & Regulation
Helping organizations adopt and build AI responsibly, with governance that tracks fast-moving and still-developing rules.
Services
- AI governance programs, policies, and oversight structures
- AI use-case inventories and risk classification
- AI risk and impact assessments
- EU AI Act readiness, including role and risk-tier analysis
- Transparency, human oversight, and accountability controls
- AI vendor diligence and contract terms
- Privacy and data protection issues in model training and deployment
- AI training for boards, executives, and product teams
Regulatory requirements
- EU Artificial Intelligence Act
- US state AI and automated decision-making laws and regulations
- Privacy-law rules on profiling and automated decisions, including under the GDPR
Voluntary frameworks and standards
- NIST AI Risk Management Framework
- ISO/IEC 42001 (AI management systems)
AI rules are moving quickly, and many are proposed, phased in, or subject to change. We help clients separate binding obligations from voluntary best practices and plan for both.
Cybersecurity & Incident Readiness
Preparing for incidents before they happen, and guiding you through them when they do.
Services
- Incident response plans and playbooks
- Tabletop exercises for executive and technical teams
- Breach response counsel and notification analysis
- Security program governance and policies
- Risk management and board reporting
- Security standards and controls-based frameworks
Laws and frameworks
- US state data breach notification laws
- New York Department of Financial Services cybersecurity regulation
- NIST Cybersecurity Framework and related NIST guidance
- ISO/IEC 27001
- PCI DSS
Technology Transactions
Contracts that address how data is actually used, shared, and protected, and that allocate risk sensibly.
Agreements
- Data processing agreements (DPAs)
- Intra-group data transfer agreements
- SaaS and cloud agreements
- AI vendor and AI-enabled service agreements
- End user agreements and online terms
- Nondisclosure agreements
Related services
- Third-party and vendor risk management programs
- Contracting playbooks and negotiation support
- Privacy and security diligence in transactions
Cross-Border Data
Laws apply jurisdiction by jurisdiction, but data moves globally. We help you manage both.
Services
- International data transfer assessments
- Transfer mechanisms, including standard contractual clauses and the EU-U.S. Data Privacy Framework
- Data localization analysis
- Global incident response strategies
- Multi-jurisdictional program design
Regulatory Enforcement
Counsel when regulators come calling.
We represent and advise clients in inquiries, investigations, and enforcement actions by regulators, including European supervisory authorities, the Federal Trade Commission, state attorneys general, and other regulatory bodies.
Industries
We work with clients across a wide range of sectors.
- Adtech
- Cannabis
- Education
- Financial Services
- Food & Agriculture
- Gaming
- Government
- Healthcare
- HR & Staffing
- Insurance
- Manufacturing
- Pharmaceuticals
- Retail & eCommerce
- Sports & Entertainment
- Technology