Privacy & Data

Know what applies. Build what compliance requires.

Privacy obligations can depend on the data you collect, who it belongs to, where people are located, and how information moves through your business.

Common triggers

Privacy law enters the picture in more ways than most businesses expect.

The starting point is understanding the data, the people, and the business process around it.

Customer & website dataNames, emails, identifiers, behavioral data, account information, and consumer requests.
Health informationHIPAA and related privacy/security obligations for covered entities, business associates, and health-data workflows.
International usersGDPR and other cross-border privacy questions when products or services reach people outside the United States.
Vendors & data sharingContracts, processing terms, disclosures, and responsibilities when information moves to service providers or partners.
Services

Privacy counsel from assessment through operation.

Discuss a Privacy Matter

Privacy & Data Compliance

Applicability analysis, gap assessment, policies, procedures, and practical implementation.

HIPAA Privacy & Security

Privacy and security requirements, business associate issues, policies, risk considerations, and operational support.

GDPR Compliance

Applicability, transparency, rights requests, processing relationships, minimization, governance, and international considerations.

U.S. State Privacy Laws

Assessment and recurring compliance support across the expanding state-law landscape.

Policies, Notices & Data Mapping

Privacy policies, internal documentation, notices, inventories, data maps, and retention considerations.

Vendor & Data Agreements

Data-processing terms, privacy provisions, confidentiality clauses, and contractual safeguards.

Incident & Breach Response

Assessment, notification analysis, documentation, coordination, and responsive communications.

Ongoing Privacy Counsel

Recurring privacy-program maintenance, policy updates, regulatory monitoring, and privacy-officer support.

Not sure what applies?

Start with the data your business touches.

The firm can help identify the legal framework from there.