Overview
Katten's Privacy, Data and Cybersecurity group brings together a team of attorneys with diverse industry experience and substantial knowledge of the latest laws and practices regarding privacy and data protection. We understand the benefits and potential risks associated with the collection, use and disclosure of customer and employee information, and we work with clients to effectively resolve or prevent potential problems. Our practice encompasses the development of privacy protection practices, privacy and security law counseling and compliance, and the application of privacy laws to data use and information sharing.
We advise clients on all aspects of compliance with local, state and federal laws governing privacy and security, including the Gramm-Leach-Bliley Act (GBLA), the Health Information Portability and Accountability Act (HIPAA), the Children's Online Privacy Protection Act (COPPA), the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN-SPAM), Federal Trade Commission (FTC) enforcement, the California Consumer Privacy Act (CCPA), the EU-US Privacy Shield and the PCI Data Security Standards. We also provide counsel on compliance with international privacy and data protection laws and regulations, including the European Union General Data Protection Regulation (GDPR), the EU ePrivacy Directive, and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA). Likewise, our attorneys help clients stay ahead of emerging privacy issues related to the use of mobile technology and location-based information to engage with customers and employees, including compliance with terms of use relating to using data obtained from social networking sites and other third parties.
Katten attorneys have extensive experience working with companies to analyze their privacy needs and practices and in drafting appropriate compliance documents. We assist clients in crafting policies from scratch, as well as modernizing existing policies based on the latest developments in privacy and security law. We help implement appropriate data protection principles and practices, including assisting in the process of vetting vendors and reviewing their practices for administrative, technology and physical security procedures. If and when there is a security breach, we have the knowledge and experience to find a path through the patchwork of laws and regulations and to work with our clients' business leadership, technology professionals and media team to implement prompt and appropriate responses. We have also represented numerous clients in analyzing, mitigating and responding to data security incidents and breaches, including serving as breach "coach," managing the incident response process, working with forensics and notification vendors, addressing consumer complaints, and responding to regulatory inquiries and enforcement actions.