Privacy & Data Protection

Companies gather more information than ever about their customers and employees. With the storage of this information in electronic systems connected to the internet, the risks of that information being accessed by (or disclosed to) unauthorized or malevolent persons has never been higher. Companies are now subject to an ever-widening framework state, federal, and international laws regulating privacy and protection. Those laws cover not only the protection of personal data but may also regulate where such data must be stored, a person's rights to control their data, what disclosures companies must make about their use of the data, and actions a company must take when it suffers a data breach. Furthermore, certain types of data such as health and financial information, may be subject to special rules above and beyond other personal data. Companies are required to comply with the privacy laws that apply in the jurisdictions where their employees and customers are located. We are experienced in working with privacy laws over different local and international jurisdictions (including the EU's GDPR).