Overview
Robinson Bradshaw's Cybersecurity & Privacy Practice Group brings together a multidisciplinary team of attorneys to help clients navigate the rapidly evolving areas of cybersecurity and privacy law. We partner with clients across the country and across industries to provide solution-driven legal guidance around cybersecurity and privacy compliance matters.
We counsel clients regarding developments in cybersecurity and privacy laws, both domestically and abroad, and develop business-friendly solutions to manage legal risk and obligations. Our experience includes advising clients on the collection and handling of personal information, including under the General Data Protection Regulation (GDPR) in Europe and the United Kingdom and the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state-level privacy regimes, and on implementing privacy by design and utilizing data assets and analytics. When clients face compliance concerns, we guide them on online and e-commerce privacy obligations, and on privacy and data security obligations specific to the financial services and health care industries and other highly regulated businesses.
Experience
-
Routinely review and negotiate contractual information security and data breach response requirements in commercial services and technology agreements in multiple industries.
-
Overhauled a web-based payments platform company’s GDPR compliance plan, including by revising its standard Data Processing Addendum offered to customers.
-
Routinely advise companies across industries, including highly regulated industries like health care and financial services, in preparing website and mobile app privacy policies, and advise on collection and handling of consumer data.
-
Advised multiple clients on compliance with GDPR, including as it relates to the newly adopted Standard Contractual Clauses in the E.U. and U.K.
-
Advised multiple clients on compliance with CCPA, including as that law has evolved with the recently enacted California Privacy Rights Act, as well as similar statutes in states like Virginia, Colorado, Connecticut and Utah.
-
Routinely conduct privacy and cybersecurity due diligence in M&A transactions and negotiate related contractual representations and warranties.
-
Routinely review and negotiate privacy addenda for clients in a wide range of industries.
