Privacy and Data Protection – Critical Infrastructure

Overview

A cybersecurity incident that affects the critical infrastructure system, including energy generation and distribution facilities, transportation, the Web and other information providers, and financial markets and institutions, could undermine the functioning of the global economy and the well-being of the international community. The need for businesses, organizations, and governmental agencies that comprise the critical infrastructure to be compromise ready is extremely urgent, as they present attractive targets to bad actors sponsored by hostile governments or by independent criminal or terrorist groups. In addition, the government is increasingly concerned and has been taking steps to craft a national policy.

Our lawyers regularly advise players in these key industries, as to both preparation for and prevention of incidents and as to compliance with laws and regulations intended to make our critical infrastructure more secure. They also have experience handling the legal fallout from major incidents and emergencies affecting critical infrastructure clients.

Select Experience

  • Represented a Fortune 500 electric and natural gas utility on privacy and data security issues, including Identity Theft Red Flags Rule, Telephone Consumer Protection Act, and Fair Credit Reporting Act compliance, state data security regulations, and incident response.
  • Represented a multijurisdictional energy infrastructure company, preparing policies and procedures for the rollout of a Bring Your Own Device program.
  • Represented clients participating in U.S. Coast Guard inspections and audits, annual spill drill exercises and tabletop sessions, and management of pipeline spill response actions.
  • Represtened a pressure control system manufacturer after a well blowout that killed two members of the energy crew, injured two others, and destroyed the workover rig.
More »

Experience

  • Represented a Fortune 500 electric and natural gas utility on privacy and data security issues, including Identity Theft Red Flags Rule, Telephone Consumer Protection Act, and Fair Credit Reporting Act compliance, state data security regulations, and incident response.
  • Represented a multijurisdictional energy infrastructure company, preparing policies and procedures for the rollout of a Bring Your Own Device program.
  • Represented clients participating in U.S. Coast Guard inspections and audits, annual spill drill exercises and tabletop sessions, and management of pipeline spill response actions.
  • Represtened a pressure control system manufacturer after a well blowout that killed two members of the energy crew, injured two others, and destroyed the workover rig.
  • Represented the charterer of a tanker involved in an oil spill, including handling emergency response services and representing the client in all spill-related litigation.
  • Represented a pipeline company in claims against a salvage company for damages incurred to the client’s offshore pipeline during a salvage operation.
  • Represented an energy company as co-defendant in a case arising from a chemical plant explosion in Ohio, with a certified class of more than 10,000 neighboring residents alleging personal injury, property damage, real property diminution in value, and evacuation claims.
  • Represented critical infrastructure clients in the oversight of pipeline spill response actions following releases from an underground 12-inch jet fuel pipeline in the Florida Keys and from a train derailment in upstate New York that struck two above-ground 12-inch jet fuel pipelines.

Publications

Blog

In The Blogs

Previous Next
Data Privacy Monitor
Moving Beyond Passwords – Does Your Face Raise Privacy Concerns?
November 8, 2017
Phishing attacks continue to be the root cause of a considerable number of data breaches. Typically, these incidents occur when employees are enticed into giving up their login credentials in response to a cleverly designed, yet fake...
Read More ->
Data Privacy Monitor
From the Mouths of Babes: FTC Issues COPPA Enforcement Policy Regarding Voice Recordings
By Alan L. Friel, Melinda L. McLellan
November 7, 2017
On October 23, the Federal Trade Commission (FTC) released new guidance on how the Children’s Online Privacy Protection Act (COPPA) Rule may apply to audio recordings of children’s voices collected by websites and online services...
Read More ->
Data Privacy Monitor
Deception and Unfair Practices Come Preinstalled
By Alan L. Friel
October 23, 2017
Lenovo, a manufacturer of personal computers, recently agreed, among other things, to implement a software security program in a settlement with the Federal Trade Commission (FTC) over issues with third-party software preinstalled on some...
Read More ->
Data Privacy Monitor
FTC Takes Action Against Individual Social Media Influencers
By Stephanie A. Lucas
September 26, 2017
Advertisers’ and brands’ use of social media influencers has continued to grow in importance as brands seek to reach new consumers while marketing to a widespread demographic. Traditionally, influencers are known as people who leverage...
Read More ->
Data Privacy Monitor
European Court Provides Further Clarity on Employee Monitoring
By Emily R. Fedeles, Nichole L. Sterling
September 20, 2017
The September 5, 2017, decision of the Grand Chamber of the European Court of Human Rights (ECHR) in Barbulescu v Romania (Barbulescu) has interrupted a recent trend toward limiting privacy in the European workplace. The Barbulescu...
Read More ->