Data Protection

The Data Protection Group provides counseling to a wide variety of clients, including network and Internet service providers and leading financial institutions, on cybersecurity and data security.  We regularly review and revise security-related policies and provide immediate incident response to clients who have suffered information security breaches.

Our group is comprised of former federal cybercrime prosecutors, in-house lawyers from ISPs and technology companies, CISSPs and certified computer forensic professionals.

We have helped some of the nation’s most trusted institutions develop their information security and incident response policies.  On behalf of our clients we:

• Develop incident response plans and coordinate notification strategy for those clients who have suffered breaches involving personally identifiable information, including ISPs, financial institutions, wireless providers, insurance companies, and others.
• Represent businesses that have suffered information security breaches in FTC and State Attorney General inquiries and civil litigation.
• Perform information security audits, including comprehensive reviews of data storage, transfer and protection policies to evaluate compliance with applicable state and federal regulations.
• Conduct internal and Internet investigations to identify and track down wrongdoers who cause harm to our clients through the Internet or networked computer systems (e.g., trade secret leaks or theft, hacking, extortion, defamation), and pursue criminal referrals and civil litigation against such wrongdoers.
• Assist clients in the communications, wireless, financial, health care, insurance, marketing, and consumer credit sectors.

Our Services

Our services are designed to mitigate potential liability and losses due to wrongful network and Internet activity and to deter future misconduct.

• Advising on security breach notification
• Legal action against Internet wrongdoers, including hackers, pirates, spammers and phishers
• FTC and attorney general investigations
• Defending class actions based on security breaches and allegedly unfair Internet practices
• Incident response and information security policy planning
• Information security due diligence for corporate acquisitions
• Privacy & security audits
• CAN-SPAM counseling
• Representation before Congress and Federal agencies
• Compliance with government requests for subscriber information
• Preventing liability from Internet practices (e.g., spyware, pornography, Internet gambling)
• Internal investigations
• USA Patriot Act, ECPA and Wiretap Act counseling