Led by top practitioners in privacy, cybersecurity, financial services, fintech, intellectual property, criminal defense and investigations and civil litigation, S&C’s Privacy Group has the depth and experience to advise companies on the full range of privacy issues that can arise in complex matters.
S&C works with clients subject to global privacy and data protection laws and regulations, which include the California Consumer Privacy Act (CCPA), Texas Data Privacy and Security Act and other comprehensive U.S. state privacy laws, the European Union General Data Protection Regulation (GDPR) and UK GDPR, the Illinois Biometric Information Privacy Act (BIPA), the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Children’s Online Privacy Protection Act (COPPA).
From startups to well-established companies, clients seek out S&C’s multi-disciplinary team for strategic advice on privacy issues impacting their products and services; compliance with local, state, federal and international privacy laws and regulations; and privacy-focused investigations and litigation. We help clients incorporate privacy-by-design into their products, services, websites, mobile apps and back-end infrastructure and conduct data protection impact assessments that evaluate how they collect, use, disclose and dispose of personal information.
When reviewing potential transactions, we strategize closely with our clients and survey the importance of data, conduct targeted due diligence, revise and negotiate agreements and assist clients with post-closing transition services, including data integration or separation.
Areas of focus include:
- Advising clients on privacy and cybersecurity issues in mergers, acquisitions, joint ventures and other business combinations;
- Drafting and negotiating data sharing, processing and transfer agreements and assisting with third-party vendor management programs;
- Assisting clients with developing privacy compliance programs, including by drafting privacy notices, consent forms and data subject request policies and procedures;
- Advising on processing personal data in the adoption and deployment of artificial intelligence;
- Providing strategic counseling on data governance and privacy issues associated with new business opportunities, consumer marketing programs or the processing of biometric information;
- Developing cross-border data transfer strategies and assisting with compliance with international privacy laws and regulations;
- Advising on employee privacy issues including employee monitoring, geolocation tracking and the use of ephemeral communications;
- Assisting clients in responding to federal, state and international privacy investigations, litigation or monitorships; and
- Drafting and revising privacy-related disclosures in regulatory filings.
Subscribe to receive our insights.