Sullivan & Cromwell LLP Logo Sullivan & Cromwell LLP Logo
  • Lawyers
  • Practices
  • Insights
  • About
  • Careers
  • Alumni
  • Twitter icon
  • LinkedIn icon
  •  icon
  • Podcasts icon
© 2026 Sullivan & Cromwell LLP
    • Home
    • Lawyers
    • Practices
    • Insights
    • About
    • Careers
    • Alumni
    Home /  Practices /  Privacy

    Privacy

    Related Lawyers

    Led by top practitioners in privacy, cybersecurity, financial services, fintech, intellectual property, criminal defense and investigations and civil litigation, S&C’s Privacy Group has the depth and experience to advise companies on the full range of privacy issues that can arise in complex matters.

    S&C works with clients subject to global privacy and data protection laws and regulations, which include the California Consumer Privacy Act (CCPA), Texas Data Privacy and Security Act and other comprehensive U.S. state privacy laws, the European Union General Data Protection Regulation (GDPR) and UK GDPR, the Illinois Biometric Information Privacy Act (BIPA), the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Children’s Online Privacy Protection Act (COPPA).

    From startups to well-established companies, clients seek out S&C’s multi-disciplinary team for strategic advice on  privacy issues impacting their products and services; compliance with local, state, federal and international privacy laws and regulations; and privacy-focused investigations and litigation. We help clients incorporate privacy-by-design into their products, services, websites, mobile apps and back-end infrastructure and conduct data protection impact assessments that evaluate how they collect, use, disclose and dispose of personal information. 

    When reviewing potential transactions, we strategize closely with our clients and survey the importance of data, conduct targeted due diligence, revise and negotiate agreements and assist clients with post-closing transition services, including data integration or separation.

    Areas of focus include:

    • Advising clients on privacy and cybersecurity issues in mergers, acquisitions, joint ventures and other business combinations;
    • Drafting and negotiating data sharing, processing and transfer agreements and assisting with third-party vendor management programs;
    • Assisting clients with developing privacy compliance programs, including by drafting privacy notices, consent forms and data subject request policies and procedures;
    • Advising on processing personal data in the adoption and deployment of artificial intelligence;
    • Providing strategic counseling on data governance and privacy issues associated with new business opportunities, consumer marketing programs or the processing of biometric information;
    • Developing cross-border data transfer strategies and assisting with compliance with international privacy laws and regulations;
    • Advising on employee privacy issues including employee monitoring, geolocation tracking and the use of ephemeral communications;
    • Assisting clients in responding to federal, state and international privacy investigations, litigation or monitorships; and
    • Drafting and revising privacy-related disclosures in regulatory filings.

    Subscribe to receive our insights.

    Read More

    Spotlight

    S&C Advises MediLink on Exclusive Licensing Agreement with Roche

    Read More

    The American Lawyer Shortlists Mark Schenkel for “Young Lawyer of the Year – Corporate”

    Read More
    • Experience
    • Rankings and Recognitions
    • News
    • Publications, Videos and Podcasts
    • Practice Contacts
    • Related Lawyers
    Experience

    Experience

    Transactions and Corporate Finance

    • American Express in its $400 million acquisition of Tock, a reservation, table and event management technology provider, from Squarespace.
    • Boeing in its $8.3 billion acquisition of Spirit AeroSystems, a manufacturer of aerostructures for commercial airplanes, defense platforms, and business/regional jets.
    • Pershing Square Capital Management (PSCM) in its $1.05 billion sale of a 10 percent common equity interest in Pershing Square Holdco, L.P., a newly formed holding company for the business of PSCM.
    • Enbridge in its $14 billion acquisition of three utilities.
    • Goldman Sachs as placement agent in connection with Stripe’s $6.5 billion private placement, one of the largest private stock sales in U.S. history.
    • J.P. Morgan in its acquisition of Aumni, a leading investment analytics company that serves clients in the venture capital industry that have invested in more than 17,000 portfolio companies.
    • Mitsubishi UFJ Financial Group in its sale of MUFG Union Bank’s U.S. core regional banking franchise to U.S. Bancorp.
    • Kering Eyewear in its acquisition of Hawaiian eyewear brand Maui Jim.
    • AT&T in the combination of its WarnerMedia business with Discovery, Inc.

    • Booking Holdings in its $1.2 billion acquisition of Getaroom, a B2B distributor of hotel rooms, from Court Square Capital Partners.
    • Biohaven in its $11.6 billion acquisition by Pfizer.
    • Benefitfocus, Inc. in its sale to Voya Financial, Inc.
    • BNY Mellon in its sale of BNY Alcentra Group Holdings to Franklin Templeton.
    • LeonardoDRS in its merger with RADA Electronic Industries.
    • Financial institutions, insurers and manufacturers in describing the impact of new privacy laws, regulations and cross-border data transfer restrictions in their SEC disclosures.

    Compliance, Contracting and Strategic Counseling

    • Various clients, including an AI supercomputing company, in drafting privacy notices, terms of use, cookie policies and other online disclosures.
    • A leading hedge fund, technology licensing company and digital assets provider in drafting and negotiating data sharing or data processing agreements.
    • Technology companies in connection with developing and training algorithms in compliance with applicable privacy laws.
    • Various companies on the use of customer information for data analytics purposes, including whether certain contemplated uses would comply with federal and state privacy and other laws.
    • HIPAA-covered entities and business associates on their HIPAA compliance obligations, including drafting, negotiating and executing business associate agreements.
    • Various companies in developing GDPR compliance programs, including data subject request policies and procedures, data protection charters and data governance materials.
    • Various clients on the collection, use and disclosure of biometric information and associated legal requirements.

    Litigation/Investigations

    • Various companies on compliance with the GDPR and data protection laws in Canada, Japan, Brazil and other jurisdictions regarding document collection, review and production and information systems access in regulatory investigations, including advising on consent, notice and data transfer issues.
    • Various financial institutions on privacy considerations in government investigations, including data transfer issues and redaction issues.
    • Financial institutions and manufacturers on compliance with applicable privacy laws during the bankruptcy and restructuring process.
    Read More
    Rankings and Recognitions

    Rankings and Recognitions

    • The American Lawyer Shortlists Mark Schenkel for “Young Lawyer of the Year – Corporate”

      August 19, 2025
    • Nicky Friedlander and Tony Lewis Again Named to Cybersecurity Docket’s ‘Incident Response 50’

      April 23, 2025
    • Nicky Friedlander and Tony Lewis Once Again Named to Cybersecurity Docket’s ‘Incident Response 50’ for 2024

      April 19, 2024
    • Nicky Friedlander and Tony Lewis Named to Cybersecurity Docket’s “Incident Response 50” for 2023

      April 21, 2023
    • Nicky Friedlander Named to Cybersecurity Docket’s “Incident Response 40”

      April 22, 2022
    Read More
    News

    News

    • S&C Advises MediLink on Exclusive Licensing Agreement with Roche

      January 12, 2026
    • S&C Advises American Express in its Acquisition of Tock

      July 12, 2024
    • S&C Advises Boeing in $8.3 Billion Acquisition of Spirit AeroSystems

      July 1, 2024
    • S&C Advises Pershing Square Capital Management in Sale of Minority Interest to Strategic Investors

      June 5, 2024
    • S&C Advises Enbridge in $14 Billion Acquisition of Utilities Providers

      September 13, 2023
    • S&C Advises on Stripe’s $6.5 Billion Stock Private Placement

      April 12, 2023
    Read More
    Read More
    Publications, Videos and Podcasts

    Publications, Videos and Podcasts

    • Rachel Yu, Bradley King and Jack Baum Author Law360 Article on GenAI Compliance in Life Sciences

      Articles |  May 22, 2025
    • EU Court Landmark Ruling Reinforces Transparency of EU Institutions

      S&C Memos |  May 15, 2025
    • When Worlds Collide: EU Data Protection, Artificial Intelligence and Trade Secrets

      S&C Memos |  March 10, 2025
    • Mehdi Ansari Authors New York Law Journal Article on AI in Arbitration

      Articles |  January 30, 2025
    • Ryan Logan Authors Bloomberg Law Practical Guidance Article on EU-U.S. Data Privacy Framework Consumer Personal Data Privacy Policy

      Articles |  October 1, 2024
    • Ryan Logan Authors Bloomberg Law Practical Guidance Article on Washington My Health My Data Act

      Articles |  May 22, 2024
    Read More
    Read More
    Practice Contacts

    Practice Contacts

    Craig D. Jones Headshot Photo
    Craig D. Jones
    London
    +44-20-7959-8900
    Email
    vCard
    Ryan P. Logan Headshot Photo
    Ryan P. Logan
    New York
    +1-212-558-4000
    Email
    vCard
    Read More
    Sullivan & Cromwell LLP Logo Sullivan & Cromwell LLP Logo
    • Twitter icon
    • LinkedIn icon
    • RSS Feed icon
    • Podcasts icon
    • Contact Us
    • Cookies
    • Privacy & Disclaimers
    • Attorney Advertising
    © 2026 Sullivan & Cromwell LLP