We build privacy programs, review the contracts that govern how data actually moves, and step in first when an incident happens — all under attorney-client privilege.
Cal. Civ. Code § 1798.100 et seq. (CCPA/CPRA)
Every state privacy law defines personal information, consumer rights, and enforcement slightly differently. We build one program that scales across jurisdictions instead of a patchwork of one-off fixes.
Regulation (EU) 2016/679 (GDPR)
From lawful-basis analysis to Standard Contractual Clauses, we help organizations move data across borders in a way that holds up to regulatory scrutiny.
State breach notification statutes; 45 C.F.R. § 164.400 (HIPAA breach rule, where applicable)
We work alongside your forensic and IT teams to assess notification obligations, draft required disclosures, and manage regulator and consumer communications under privilege.
Cal. Civ. Code § 1798.140 (service provider contracts)
Data protection addenda, vendor risk assessments, and processor agreements reviewed with an eye toward the liability and audit terms that matter most in a dispute.
Call the line below first. Getting counsel involved before notifications go out keeps your response under privilege.
Schedule a Confidential Consultation