Data Privacy

Porzio’s Data Privacy practice group provides comprehensive and tailored guidance to clients across various industries and sectors. Our multi-disciplinary team works collaboratively with clients to navigate the complex and continually evolving landscape of data privacy and protection laws and regulations both domestically and abroad to foster best practices while achieving, and optimizing, their business objectives. 

Our experienced multi-disciplinary team provides a wide range of services, for example:

  • Advisory on Data Privacy Laws and Regulations: We regularly advise on both existing and emerging data privacy laws and associated regulations including, the California Consumer Privacy Act (CCPA), as amended by the Consumer Privacy Rights Act (CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act (CTDPA), the Virginia Consumer Data Protection Act (VCDPA), the Utah Consumer Privacy Act (UCPA), the New Jersey Data Privacy Act (NJDPA), the Washington My Health My Data Act (WaMHMD), as well as compliance with international privacy laws like the General Data Protection Regulation (GDPR). We also guide clients on compliance with the Federal Trade Commission Act, FTC guidance and enforcements, the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach-Bliley Act (GLBA), the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA) and the CAN-SPAM Act.
  • Policy Development & Analysis: We develop and analyze data privacy policies, data privacy notices, data subject consent mechanisms, attendant standard operating procedures and data privacy business relationships.
  • Contract Drafting and Negotiation: We draft and negotiate data processing addendums/agreement and data transfer arrangements including Standard Contractual Clauses.
  • Self-Certification Guidance: We facilitate the self-certification for and provide guidance on the U.S. Department of Commerce’s Data Privacy Framework program.
  • Privacy Assessments and Audits: We counsel on the deployment of data protection impact assessments, records of processing activities and conduct data privacy assessments, audits and trainings.
  • Actionable Insights on Emerging Trends: We provide actionable insights on a wide range of emerging data privacy issues and trends including, biometric data, artificial intelligence (AI), the Internet of Things (IoT) and the increasing enforcement focus on all forms of sensitive data.

Porzio’s Data Privacy practice group keeps our clients ahead of the curve by collaborating to provide pragmatic advice on how best to optimize business performance while complying with the intricacies of the data privacy laws of today and tomorrow.