Area of focus

Data Privacy and Cybersecurity Litigation

Ranked as Band 1 for Privacy and Data Security by Chambers Global since 2013, we have vast experience in privacy and data breach litigation. We combine our litigation and investigations skill with our cybersecurity and privacy practices to provide an integrated approach to data disputes. We advise clients across multiple...

Ranked as Band 1 for Privacy and Data Security by Chambers Global since 2013, we have vast experience in privacy and data breach litigation. We combine our litigation and investigations skill with our cybersecurity and privacy practices to provide an integrated approach to data disputes. We advise clients across multiple industries, from tech sector titans to major financial services corporations. And we lead the way: in the U.S., our Privacy and Cybersecurity Litigation team was the first to complete comprehensive expert discovery and class certification briefing in major cyber-attack data breach litigation, and in the UK we obtained the withdrawal of the first data breach representative action to come before the English court.

Representative experience

Successfully defended the largest U.S.-based health insurance, retail, consumer finance, and technology companies in class action litigation relating to data breaches involving hundreds of millions of records.

Regularly represent companies, health care providers, and universities in data security and privacy investigations by U.S. agencies including the FTC, state attorneys general, and financial regulators.

Defending multinational consumer reporting agency in first of its kind proposed action in English High Court on behalf of an alleged class of up to 15 million UK data subjects affected by a 2017 cyberattack.

Represented Google in proceedings before the European Court of Justice in which the ECJ issued a landmark ruling that the "right to be forgotten" does not extend beyond the borders of the European Union.

For an online photo company, resolved U.S. Federal Trade Commission claims and private class actions related to facial recognition software and company disclosure and data practices.

Defending the world's largest video-sharing platform in multiple lawsuits in the U.S. involving the Children's Online Privacy Protection Act of 1998 (COPPA).

Representing an international company in the scope of a class action launched by a major French consumer association on the grounds of an alleged failure to comply with the provisions of the GDPR.

Advising a global financial institution in relation to data protection, bank secrecy, and banking regulatory aspects of a data security breach involving its use of Hong Kong's consumer credit reporting system.

Loading data