Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Home | BakerHostetler

Delaware’s Restrictive Covenant Challenges in the Past Year

AD Nauseam

AD Nauseam: Every Breath You Take: Emerging Al Pricing Laws and Guidelines

ADventures in Law

Youth Privacy Takes Center Stage at the 2026 ANA Masters of Advertising Law Conference

Digital Health and AI: Key Regulatory, Reimbursement and Policy Developments

BakerHostetler’s dedicated Digital Assets and Data Management (DADM) Practice Group addresses the end-to-end data life cycle, with a data strategy that includes data opportunities and monetization and the myriad privacy and data protection risks facing our clients. Drawing on our extensive experience in privacy and technology counseling, our data privacy attorneys have identified the following key enterprise data opportunity and compliance priorities:

core/paragraph

BakerHostetler’s dedicated Digital Assets and Data Management (DADM) Practice Group addresses the end-to-end data life cycle, with a data strategy that includes data opportunities and monetization and the myriad privacy and data protection risks facing our clients. Drawing on our extensive experience in privacy and technology counseling, our data privacy attorneys have identified the following key enterprise data opportunity and compliance priorities:

Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies may miss valuable opportunities to benefit from data. Noncompliance with applicable privacy and AI laws can result in hefty fines or litigation costs and erode the trust of customers and business partners.

Start with the basic building block of all narrative.

In a village of La Mancha, the name of which I have no desire to call to mind, there lived not long since one of those gentlemen that keep a lance in the lance-rack, an old buckler, a lean hack, and a greyhound for coursing.

Paragraph

paragraph

Paragraph that resizes to fit its container.

stretchy-paragraph

Stretchy Paragraph

Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies may miss valuable opportunities to benefit from data. Noncompliance with applicable privacy and AI laws can result in hefty fines or litigation costs and erode the trust of customers and business partners.

Public awareness raises privacy risks. The average consumer is increasingly privacy-aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity, transparency and compliance across jurisdictions. Plaintiffs’ attorneys dissect public-facing statements and the use of common website technologies to exploit companies under novel theories of older laws.

Public awareness raises privacy risks. The average consumer is increasingly privacy-aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity, transparency and compliance across jurisdictions. Plaintiffs’ attorneys dissect public-facing statements and the use of common website technologies to exploit companies under novel theories of older laws.

Websites, apps, adtech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy and AI laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices – as well as third-party risk management – are essential.

Websites, apps, adtech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy and AI laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices – as well as third-party risk management – are essential.

Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to enhanced scrutiny and recent regulatory inquiries. An organization’s data strategy must account for current – and anticipate future – data uses by the enterprise, implement effective contracting and vendor management processes and make proper disclosures to consumers. Failure to do so can invite regulatory scrutiny and disrupt intended uses of personal data, including planned business partnerships or data-reliant deals.

Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to enhanced scrutiny and recent regulatory inquiries. An organization’s data strategy must account for current – and anticipate future – data uses by the enterprise, implement effective contracting and vendor management processes and make proper disclosures to consumers. Failure to do so can invite regulatory scrutiny and disrupt intended uses of personal data, including planned business partnerships or data-reliant deals.

Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and precise geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data minimization obligations, impact assessments and use restrictions. When businesses decide whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens – which include, in some cases, actual prohibitions on certain uses and disclosures.

Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and precise geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data minimization obligations, impact assessments and use restrictions. When businesses decide whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens – which include, in some cases, actual prohibitions on certain uses and disclosures.

When data changes hands, whether through M&amp;A or license, there is a real opportunity for value creation; however, there is also significant risk. Transferring data, especially as part of a larger corporate transaction, requires proper diligence, security measures, compliance checks and a post-transaction data strategy.

When data changes hands, whether through M&amp;A or license, there is a real opportunity for value creation; however, there is also significant risk. Transferring data, especially as part of a larger corporate transaction, requires proper diligence, security measures, compliance checks and a post-transaction data strategy.

The AI directive facing many companies requires large amounts of data. Companies with a robust data repository and directory are going to win the AI race in their industry. Using data in connection with AI – whether proprietary models or third-party models – requires additional consideration regarding both the terms under which the data was collected and downstream protections for that data.

The AI directive facing many companies requires large amounts of data. Companies with a robust data repository and directory are going to win the AI race in their industry. Using data in connection with AI – whether proprietary models or third-party models – requires additional consideration regarding both the terms under which the data was collected and downstream protections for that data.

Introduce new sections and organize content to help visitors (and search engines) understand the structure of your content.

core/heading

Heading

heading

Heading that resizes to fit its container.

stretchy-heading

Stretchy Heading

<h2 class="wp-block-heading" id="h-why-bakerhostetler">Why BakerHostetler?</h2>

BakerHostetler’s Chambers-ranked DADM Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our DADM attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology and telecommunications. With an innovative and market-leading privacy, AI and technology team, we guide clients on all aspects of U.S. and global privacy and digital risk.

BakerHostetler’s Chambers-ranked DADM Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our DADM attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology and telecommunications. With an innovative and market-leading privacy, AI and technology team, we guide clients on all aspects of U.S. and global privacy and digital risk.

In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of Financial Times’ Top 25 Most Innovative Law Firms in North America for three consecutive years, and we were proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.

In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of Financial Times’ Top 25 Most Innovative Law Firms in North America for three consecutive years, and we were proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.

How We Help Clients with Their Data Strategy

<h2 class="wp-block-heading" id="h-how-we-help-clients-with-their-data-strategy">How We Help Clients with Their Data Strategy</h2>

Companies use data to innovate new products and services, enhance customer and market insights, evaluate performance, and create efficiencies. Data also underpins technologies and generates new revenue streams. The onset of generative and agentic AI tools has escalated the need for companies to find smart and compliant ways to use data. We help businesses derive value from data in compliance with AI regulations and privacy and data protection laws in the U.S. and globally. Because we provide clients with informed, tailored and business-oriented advice covering the end-to-end data life cycle, our clients can concentrate on their primary business activities with confidence that we will serve as their strategic adviser and crisis operator.

Companies use data to innovate new products and services, enhance customer and market insights, evaluate performance, and create efficiencies. Data also underpins technologies and generates new revenue streams. The onset of generative and agentic AI tools has escalated the need for companies to find smart and compliant ways to use data. We help businesses derive value from data in compliance with AI regulations and privacy and data protection laws in the U.S. and globally. Because we provide clients with informed, tailored and business-oriented advice covering the end-to-end data life cycle, our clients can concentrate on their primary business activities with confidence that we will serve as their strategic adviser and crisis operator.

Our attorneys provide privacy compliance counseling; design data protection programs; prepare data risk assessments; assist with data-driven transactions, AI policies and vendor review; develop risk mitigation strategies; handle consumer and regulatory inquiries from all federal and state authorities; and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting AI and data protection challenges. Clients value our experience and practical advice when it comes to developing a comprehensive data strategy and achieving their business or compliance goals.

Our attorneys provide privacy compliance counseling; design data protection programs; prepare data risk assessments; assist with data-driven transactions, AI policies and vendor review; develop risk mitigation strategies; handle consumer and regulatory inquiries from all federal and state authorities; and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting AI and data protection challenges. Clients value our experience and practical advice when it comes to developing a comprehensive data strategy and achieving their business or compliance goals.

contentpilot/expand-more

<section class="wp-block-contentpilot-expand-more"><div class="wp-block-contentpilot-expand-more__excerpt is-visible" data-selector="expand-more"></div><div class="wp-block-contentpilot-expand-more__full-content" data-selector="expand-more">Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies may miss valuable opportunities to benefit from data. Noncompliance with applicable privacy and AI laws can result in hefty fines or litigation costs and erode the trust of customers and business partners.Public awareness raises privacy risks. The average consumer is increasingly privacy-aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity, transparency and compliance across jurisdictions. Plaintiffs’ attorneys dissect public-facing statements and the use of common website technologies to exploit companies under novel theories of older laws.Websites, apps, adtech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy and AI laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices – as well as third-party risk management – are essential.Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to enhanced scrutiny and recent regulatory inquiries. An organization’s data strategy must account for current – and anticipate future – data uses by the enterprise, implement effective contracting and vendor management processes and make proper disclosures to consumers. Failure to do so can invite regulatory scrutiny and disrupt intended uses of personal data, including planned business partnerships or data-reliant deals.Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and precise geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data minimization obligations, impact assessments and use restrictions. When businesses decide whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens – which include, in some cases, actual prohibitions on certain uses and disclosures.When data changes hands, whether through M&amp;A or license, there is a real opportunity for value creation; however, there is also significant risk. Transferring data, especially as part of a larger corporate transaction, requires proper diligence, security measures, compliance checks and a post-transaction data strategy.The AI directive facing many companies requires large amounts of data. Companies with a robust data repository and directory are going to win the AI race in their industry. Using data in connection with AI – whether proprietary models or third-party models – requires additional consideration regarding both the terms under which the data was collected and downstream protections for that data.<h2 class="wp-block-heading" id="h-why-bakerhostetler">Why BakerHostetler?</h2>BakerHostetler’s Chambers-ranked DADM Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our DADM attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology and telecommunications. With an innovative and market-leading privacy, AI and technology team, we guide clients on all aspects of U.S. and global privacy and digital risk.In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of Financial Times’ Top 25 Most Innovative Law Firms in North America for three consecutive years, and we were proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.<h2 class="wp-block-heading" id="h-how-we-help-clients-with-their-data-strategy">How We Help Clients with Their Data Strategy</h2>Companies use data to innovate new products and services, enhance customer and market insights, evaluate performance, and create efficiencies. Data also underpins technologies and generates new revenue streams. The onset of generative and agentic AI tools has escalated the need for companies to find smart and compliant ways to use data. We help businesses derive value from data in compliance with AI regulations and privacy and data protection laws in the U.S. and globally. Because we provide clients with informed, tailored and business-oriented advice covering the end-to-end data life cycle, our clients can concentrate on their primary business activities with confidence that we will serve as their strategic adviser and crisis operator.Our attorneys provide privacy compliance counseling; design data protection programs; prepare data risk assessments; assist with data-driven transactions, AI policies and vendor review; develop risk mitigation strategies; handle consumer and regulatory inquiries from all federal and state authorities; and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting AI and data protection challenges. Clients value our experience and practical advice when it comes to developing a comprehensive data strategy and achieving their business or compliance goals.</div><button class="wp-block-contentpilot-expand-more__more-button is-visible" data-selector="expand-more">View More</button><button class="wp-block-contentpilot-expand-more__less-button" data-selector="expand-more">View Less</button></section>

Data Strategy and Risk

Featured Insights

Related Services

Featured Insights