Spencer Persson is a partner in BakerHostetler’s Digital Assets and Data Management Practice Group who focuses his practice on defending litigation involving data breaches, phishing scams, wiretapping and the loss of sensitive personally identifying information. He has served as lead counsel in numerous high-stakes matters for technology companies, retailers, manufacturers, entertainment companies, insurers, health care and financial service providers.
Spencer has secured dismissals for clients across the country, including a 2024 victory in which the Alabama Supreme Court affirmed the dismissal of a class action against one of his clients and in a 2026 victory in which the Oregon Court of Appeals did the same for another client. In addition to privacy litigation, Spencer has significant experience defending claims under privacy statutes such as the California Consumer Privacy Act (CCPA), the Confidentiality of Medical Information Act (CMIA), the California Invasion of Privacy Act (CIPA), the Video Privacy Protection Act (VPPA) and the Fair and Accurate Credit Transactions Act (FACTA), among others. Plaintiffs’ attorneys increasingly rely on these statutes to pressure defendants through the threat of extended litigation or statutory damages, and Spencer develops tailored defense strategies for each client. Additionally, Spencer holds a CIPP/US Certification.



