Data Privacy & Cybersecurity

Whether your organization faces uncertainty arising from complex state and federal privacy and cybersecurity requirements or needs preventive guidance to keep company data confidential, Dickinson Wright provides a full range of services to identify, address, and respond to statutory, regulatory, contractual, and best-practice information privacy obligations. We help clients identify and anticipate risks, develop and implement tailored plans and policies, establish data incident response procedures, and respond when a data incident or breach is suspected.

Our data privacy and cybersecurity team draws on experience involving technology-related legal issues, digital forensics, cybercrime investigations, health care law, employment law, and government investigations, regulatory enforcement, and litigation. We use that background to help clients understand the intersection of law and technology, identify potential threats, implement policies that reflect current standards, reduce the risk of cybersecurity events, and respond quickly when incidents arise.

Your data privacy and cybersecurity needs do not stop at the border, and neither does our experience. With offices across the U.S. and in Canada, our lawyers work together to address data transfers, mergers and acquisitions, and other cross-border privacy matters.

Our Services
Data Breach Prevention and Remediation

Even organizations that follow best practices may experience data security incidents. Proper policies, training, and safeguards tailored to an organization’s needs can help reduce that risk. Our attorneys evaluate clients’ obligations, develop procedures designed to protect the confidentiality, integrity, and availability of data, and create response plans for identifying, evaluating, and addressing security incidents. We assist with matters involving:

Regulatory Compliance

Federal and state privacy laws affect nearly every organization that controls or possesses personal data. Understanding these requirements can be difficult, and noncompliance may result in significant penalties. Dickinson Wright’s data privacy and cybersecurity team helps clients understand and comply with laws governing personal information, protected health information, and confidential business information. We regularly advise clients on the risks, obligations, and practical considerations associated with data privacy and security.

General Data Protection Regulation Compliance

The European Union’s General Data Protection Regulation applies to organizations located within the EU and, in many circumstances, to organizations outside the EU that employ or engage workers there, offer goods or services to EU residents, or monitor their behavior. Companies that process or retain the personal data of individuals residing in the EU may be subject to requirements involving consent, data retention, breach notification, and other privacy obligations. Our attorneys help clients evaluate whether the GDPR applies to their operations, update policies and procedures, and address compliance requirements.

Government Investigations

Organizations that are not suspected of criminal wrongdoing may still receive a search warrant, subpoena, or court order requiring the disclosure of sensitive or confidential information. We help clients respond to government requests while protecting confidential and proprietary information and preserving business continuity. Our team includes former state and federal law enforcement personnel, prosecutors, and government attorneys who bring practical perspective to these matters and communicate with government agencies on clients’ behalf.

Litigation

Dickinson Wright’s litigators protect clients’ rights, enforce obligations, and help clients pursue their legal objectives efficiently. We represent clients in regulatory proceedings, defend individual and class action lawsuits, and pursue claims involving data security and privacy obligations.

To learn more about Dickinson Wright’s Data Privacy & Cybersecurity practice, please review the firm’s Data Privacy & Cybersecurity Practice Guide.