Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Home | BakerHostetler

Artie McConnell Presents on Safeguarding Aerospace & Defense Supply Chains Webinar

Nicholas Carson, Christina Novotny Present ‘Tax Credits/Incentives Under the Inflation Reduction Act’ to Tax Club of Cleveland

Erica Nordberg Joins <em>Citywealth</em> Leaders List: Top 40 Washington DC Wealth Advisors and Manager 2026

Data Counsel

Video Game Consoles and the Texas App Age Assurance Law

We work with the key personnel who have responsibility for privacy and security and for technology infrastructure, including chief information and privacy officers, marketing team leaders, compliance officers, finance leaders and in-house legal teams. Our incident response experience and regulatory knowledge mean we are uniquely qualified to examine both internal and privacy governance policies. Our deep understanding of technology positions us to advise clients regarding the best practices for technology transactions, including negotiating agreements regarding cloud services and technology infrastructure as well as data ownership and other key issues that arise when companies do business together.

core/paragraph

<p>We work with the key personnel who have responsibility for privacy and security and for technology infrastructure, including chief information and privacy officers, marketing team leaders, compliance officers, finance leaders and in-house legal teams. Our incident response experience and regulatory knowledge mean we are uniquely qualified to examine both internal and privacy governance policies. Our deep understanding of technology positions us to advise clients regarding the best practices for technology transactions, including negotiating agreements regarding cloud services and technology infrastructure as well as data ownership and other key issues that arise when companies do business together.</p>

Introduce new sections and organize content to help visitors (and search engines) understand the structure of your content.

core/heading

Heading

heading

Heading that resizes to fit its container.

stretchy-heading

Stretchy Heading


<h5 class="wp-block-heading">Regulatory Defense</h5>


We advise clients on how to develop and maintain consumer privacy programs. In addition, we help clients assess privacy impacts and employ privacy by design to balance commercial and consumer interests and to craft transparent, accurate and customer-friendly notices regarding data practices.

Start with the basic building block of all narrative.

In a village of La Mancha, the name of which I have no desire to call to mind, there lived not long since one of those gentlemen that keep a lance in the lance-rack, an old buckler, a lean hack, and a greyhound for coursing.

Paragraph

paragraph

Paragraph that resizes to fit its container.

stretchy-paragraph

Stretchy Paragraph

<p>We advise clients on how to develop and maintain consumer privacy programs. In addition, we help clients assess privacy impacts and employ privacy by design to balance commercial and consumer interests and to craft transparent, accurate and customer-friendly notices regarding data practices.</p>

Our deep experience and relationships with state attorneys general and other regulatory officials allow us to deal efficiently with investigatory inquiries, often resulting in positive dispositions, including the conclusion of investigations without any charges being brought.

<p>Our deep experience and relationships with state attorneys general and other regulatory officials allow us to deal efficiently with investigatory inquiries, often resulting in positive dispositions, including the conclusion of investigations without any charges being brought.</p>


<h5 class="wp-block-heading">Our experience encompasses:</h5>


An organized collection of items displayed in a specific order.

core/list

List


<ul class="wp-block-list">
<li>California Consumer Privacy Act (CCPA) and other state privacy laws.</li>



<li>General Data Protection Regulation (GDPR).</li>



<li>Attorney General privacy investigations related to data collection and use.</li>



<li>Data localization and retention laws.</li>



<li>The Children’s Online Privacy Protection Act (COPPA).</li>



<li>Gramm Leach Bliley Act (GLBA).</li>



<li>Telephone Consumer Protection Act (TCPA) and Controlling the Assault of Non-Solicited Pornography and Marketing Act compliance.</li>



<li>Federal Trade Commission matters.</li>



<li>The Fair Credit Reporting Act. (FCRA).</li>
</ul>


California Consumer Privacy Act (CCPA) and other state privacy laws.

core/list-item

List Item

<li>California Consumer Privacy Act (CCPA) and other state privacy laws.</li>

General Data Protection Regulation (GDPR).

<li>General Data Protection Regulation (GDPR).</li>

Attorney General privacy investigations related to data collection and use.

<li>Attorney General privacy investigations related to data collection and use.</li>

<li>Data localization and retention laws.</li>

The Children’s Online Privacy Protection Act (COPPA).

<li>The Children’s Online Privacy Protection Act (COPPA).</li>

Telephone Consumer Protection Act (TCPA) and Controlling the Assault of Non-Solicited Pornography and Marketing Act compliance.

<li>Telephone Consumer Protection Act (TCPA) and Controlling the Assault of Non-Solicited Pornography and Marketing Act compliance.</li>

<li>Federal Trade Commission matters.</li>

<li>The Fair Credit Reporting Act. (FCRA).</li>

<ul><li>California Consumer Privacy Act (CCPA) and other state privacy laws.</li><li>General Data Protection Regulation (GDPR).</li><li>Attorney General privacy investigations related to data collection and use.</li><li>Data localization and retention laws.</li><li>The Children’s Online Privacy Protection Act (COPPA).</li><li>Gramm Leach Bliley Act (GLBA).</li><li>Telephone Consumer Protection Act (TCPA) and Controlling the Assault of Non-Solicited Pornography and Marketing Act compliance.</li><li>Federal Trade Commission matters.</li><li>The Fair Credit Reporting Act. (FCRA).</li></ul>


<h5 class="wp-block-heading">Technology Contracts</h5>



<ul class="wp-block-list">
<li>Our team has a well-grounded understanding of transactions involving the use, licensing, acquisition and commercialization of data and technology. We review, negotiate and draft agreements and agreement provisions regarding:</li>



<li>Cloud computing.</li>



<li>Data ownership and data protection.</li>



<li>The PCI Data Security Standard and protected health information.</li>



<li>Service level agreements.</li>



<li>Software.</li>



<li>Hardware.</li>



<li>Mobile data and commerce.</li>



<li>E-commerce.</li>



<li>Back offices and infrastructure.</li>



<li>Outsourcing.</li>
</ul>


Our team has a well-grounded understanding of transactions involving the use, licensing, acquisition and commercialization of data and technology. We review, negotiate and draft agreements and agreement provisions regarding:

<li>Our team has a well-grounded understanding of transactions involving the use, licensing, acquisition and commercialization of data and technology. We review, negotiate and draft agreements and agreement provisions regarding:</li>

<li>Data ownership and data protection.</li>

The PCI Data Security Standard and protected health information.

<li>The PCI Data Security Standard and protected health information.</li>

<li>Back offices and infrastructure.</li>

<ul><li>Our team has a well-grounded understanding of transactions involving the use, licensing, acquisition and commercialization of data and technology. We review, negotiate and draft agreements and agreement provisions regarding:</li><li>Cloud computing.</li><li>Data ownership and data protection.</li><li>The PCI Data Security Standard and protected health information.</li><li>Service level agreements.</li><li>Software.</li><li>Hardware.</li><li>Mobile data and commerce.</li><li>E-commerce.</li><li>Back offices and infrastructure.</li><li>Outsourcing.</li></ul>

We handle agreements involving all forms of cloud service (SaaS, IaaS, PaaS), video game development, mobile apps, music distribution, geolocation, payment processing, fraud prevention, data analytics and digital advertising.

<p>We handle agreements involving all forms of cloud service (SaaS, IaaS, PaaS), video game development, mobile apps, music distribution, geolocation, payment processing, fraud prevention, data analytics and digital advertising.</p>

In addition, as companies everywhere undergo digital transformation, our team offers guidance on where opportunities and vulnerabilities lie and assists in designing plans to manage, protect and leverage your digital assets, including Big Data, predictive analysis, machine learning, robotics, the Internet of Things (IoT), and voice, text and vision recognition.

<p>In addition, as companies everywhere undergo digital transformation, our team offers guidance on where opportunities and vulnerabilities lie and assists in designing plans to manage, protect and leverage your digital assets, including Big Data, predictive analysis, machine learning, robotics, the Internet of Things (IoT), and voice, text and vision recognition.</p>

We provide comprehensive advice regarding the EU’s General Data Protection Regulation (GDPR) and the new California Consumer Privacy Act (CCPA), including:

<p>We provide comprehensive advice regarding the EU’s General Data Protection Regulation (GDPR) and the new California Consumer Privacy Act (CCPA), including:</p>


<ul class="wp-block-list">
<li>Compliance readiness assessments.</li>



<li>Compliance program development and implementation.</li>



<li>Inventory data and mapping data flows.</li>



<li>Privacy and data security assessments to prepare for the impact of the private right of action arising from security incidents.</li>



<li>Risk management.</li>



<li>Tracking legislative and regulatory developments.</li>



<li>Vendor contract drafting and review.</li>



<li>Identifying, engaging and managing IT consultants and solutions.</li>
</ul>


<li>Compliance readiness assessments.</li>

Compliance program development and implementation.

<li>Compliance program development and implementation.</li>

<li>Inventory data and mapping data flows.</li>

Privacy and data security assessments to prepare for the impact of the private right of action arising from security incidents.

<li>Privacy and data security assessments to prepare for the impact of the private right of action arising from security incidents.</li>

Tracking legislative and regulatory developments.

<li>Tracking legislative and regulatory developments.</li>

<li>Vendor contract drafting and review.</li>

Identifying, engaging and managing IT consultants and solutions.

<li>Identifying, engaging and managing IT consultants and solutions.</li>

<ul><li>Compliance readiness assessments.</li><li>Compliance program development and implementation.</li><li>Inventory data and mapping data flows.</li><li>Privacy and data security assessments to prepare for the impact of the private right of action arising from security incidents.</li><li>Risk management.</li><li>Tracking legislative and regulatory developments.</li><li>Vendor contract drafting and review.</li><li>Identifying, engaging and managing IT consultants and solutions.</li></ul>

contentpilot/expand-more

<section class="wp-block-contentpilot-expand-more"><div class="wp-block-contentpilot-expand-more__excerpt is-visible" data-selector="expand-more"><p></p></div><div class="wp-block-contentpilot-expand-more__full-content" data-selector="expand-more"><h5 class="wp-block-heading">Regulatory Defense</h5><p>We advise clients on how to develop and maintain consumer privacy programs. In addition, we help clients assess privacy impacts and employ privacy by design to balance commercial and consumer interests and to craft transparent, accurate and customer-friendly notices regarding data practices.</p><p>Our deep experience and relationships with state attorneys general and other regulatory officials allow us to deal efficiently with investigatory inquiries, often resulting in positive dispositions, including the conclusion of investigations without any charges being brought.</p><h5 class="wp-block-heading">Our experience encompasses:</h5><ul><li>California Consumer Privacy Act (CCPA) and other state privacy laws.</li><li>General Data Protection Regulation (GDPR).</li><li>Attorney General privacy investigations related to data collection and use.</li><li>Data localization and retention laws.</li><li>The Children’s Online Privacy Protection Act (COPPA).</li><li>Gramm Leach Bliley Act (GLBA).</li><li>Telephone Consumer Protection Act (TCPA) and Controlling the Assault of Non-Solicited Pornography and Marketing Act compliance.</li><li>Federal Trade Commission matters.</li><li>The Fair Credit Reporting Act. (FCRA).</li></ul><h5 class="wp-block-heading">Technology Contracts</h5><ul><li>Our team has a well-grounded understanding of transactions involving the use, licensing, acquisition and commercialization of data and technology. We review, negotiate and draft agreements and agreement provisions regarding:</li><li>Cloud computing.</li><li>Data ownership and data protection.</li><li>The PCI Data Security Standard and protected health information.</li><li>Service level agreements.</li><li>Software.</li><li>Hardware.</li><li>Mobile data and commerce.</li><li>E-commerce.</li><li>Back offices and infrastructure.</li><li>Outsourcing.</li></ul><p>We handle agreements involving all forms of cloud service (SaaS, IaaS, PaaS), video game development, mobile apps, music distribution, geolocation, payment processing, fraud prevention, data analytics and digital advertising.</p><p>In addition, as companies everywhere undergo digital transformation, our team offers guidance on where opportunities and vulnerabilities lie and assists in designing plans to manage, protect and leverage your digital assets, including Big Data, predictive analysis, machine learning, robotics, the Internet of Things (IoT), and voice, text and vision recognition.</p><h5 class="wp-block-heading">GDPR and CCPA</h5><p>We provide comprehensive advice regarding the EU’s General Data Protection Regulation (GDPR) and the new California Consumer Privacy Act (CCPA), including:</p><ul><li>Compliance readiness assessments.</li><li>Compliance program development and implementation.</li><li>Inventory data and mapping data flows.</li><li>Privacy and data security assessments to prepare for the impact of the private right of action arising from security incidents.</li><li>Risk management.</li><li>Tracking legislative and regulatory developments.</li><li>Vendor contract drafting and review.</li><li>Identifying, engaging and managing IT consultants and solutions.</li></ul><p></p></div><button class="wp-block-contentpilot-expand-more__more-button is-visible" data-selector="expand-more">View More</button><button class="wp-block-contentpilot-expand-more__less-button" data-selector="expand-more">View Less</button></section>

<ul>
<li>BTI Powerhouse for Cybersecurity Litigation (2022 to 2025)</li>
<li>BTI Cybersecurity Powerhouse and BTI CyberSavvy Law Firm (2020)</li>
<li>Chambers Global
<ul>
<li>Privacy & Data Security: The Elite (USA) (2022 to 2026)</li>
<li>Privacy & Data Security (USA) (2014 to 2021)</li>
<li>Privacy & Data Security: Healthcare (USA) (2018 to 2026)</li>
<li>Privacy & Data Security: Litigation (USA) (2024, 2026)</li>
</ul>
</li>
<li>Chambers Fintech
<ul>
<li>Legal – USA (2018 to 2026)</li>
<li>Legal – Blockchain & Cryptocurrencies (2023 to 2026)</li>
<li>Data Protection & Cyber Security (2023 to 2026)</li>
</ul>
</li>
<li>Chambers USA
<ul>
<li>“Privacy & Data Security Law Firm of the Year” – Shortlisted (2015, 2018, 2023, 2024)</li>
<li>Advertising: NAD Proceedings – Nationwide (2022 to 2026)</li>
<li>Advertising: Transactional & Regulatory – Nationwide (2018 to 2026)</li>
<li>Privacy & Data Security: Healthcare – Nationwide (2018 to 2026)</li>
<li>Privacy & Data Security: Litigation – Nationwide (2023 to 2026)</li>
<li>Privacy & Data Security: Nationwide (2013 to 2020); The Elite – Nationwide (2021 to 2026)</li>
</ul>
</li>
<li>The Legal 500 United States
<ul>
<li>Media, Technology and Telecoms: Advertising and Marketing: Litigation (2026)</li>
<li>Media, Technology and Telecoms: Advertising and Marketing: Transactional and Regulatory (2018 to 2026)</li>
<li>Media, Technology and Telecoms: Cyber law (including data privacy and data protection) (2021 to 2026)</li>
</ul>
</li>
<li>Selected for Vault’s Guide to Legal Practice Areas: Privacy and Data Security (2017 to 2025)</li>
<li>Selected as a 2020-2021 “Pacesetter” in Cybersecurity Services by ALM Intelligence Pacesetter Research</li>
</ul>


State Privacy in Brief, Q2 2026

R. Bisi Adeyemo

Gerald J. Ferguson

Fernando A. Bohorquez Jr.

Brian A. Bulson

Privacy Governance and Technology Transactions

Experience

Privacy Governance

Technology Transactions

Recognitions

Insights and News

Featured Insights