We counsel clients on the full alphabet soup of U.S. and international privacy laws. We frequently advise clients on compliance with laws such as the FTC Act, HIPAA, FCRA, GLBA, CAN-SPAM, COPPA, FERPA, VPPA, TCPA, BIPA, state breach notification laws and omnibus privacy legislation such as the EU’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other emerging state privacy laws. More than a dozen states have enacted similar privacy laws, each with variations that create unique compliance challenges. Our team has extensive experience in global privacy law compliance and understands the complexities of state-specific consumer privacy laws. We assist clients in evaluating their data handling practices, ensuring compliance through updates to privacy policies, user interfaces, and vendor contracts, and we actively monitor and respond to regulatory changes, litigation, and enforcement actions to minimize risk and defend against privacy-related legal challenges.  

We are innovative in our approach and have launched various tools to help our clients build and manage their privacy and security programs, including the Privacy Starter Kit, and Data Navigator. 

Learn more.

Perkins Coie’s Privacy & Security practice handles complex legal disputes for leading tech companies. Clients rely on us for sensitive and high-stakes cases involving data collection, use, security, and disclosure, as well as claims related to constitutional privacy, tort invasion of privacy, and consumer protection laws. With extensive experience in wiretapping and privacy claims, we are a top choice for biometrics litigation, having successfully defended major tech companies and developed innovative defenses. We also counsel clients on product design to minimize risk. Additionally, we have successfully defended privacy class actions nationwide, covering a range of claims from federal and state privacy laws to common law intrusion upon seclusion and constitutional privacy rights. 

Learn more.

We handle some of the highest-profile privacy, data security, and consumer protection investigations and enforcement actions of the Federal Trade Commission (FTC), state attorneys general, local regulators, and foreign data protection authorities. Companies across a wide array of industries, ranging from startups to some of the world’s largest corporations, turn to us for counsel at all stages of investigations, inquiries, negotiations, and lawsuits. 

Learn more.

Our data security and breach response team advises clients on the development of robust security programs and effectively managing breach responses. We have successfully handled hundreds of matters related to data breaches and security incidents across the United States and globally, and provide strategic guidance to strengthen preventative measures, minimize risks, and ensure compliance with evolving data protection regulations. Additionally, in the event of a security breach, we offer immediate, coordinated response services to mitigate damages, manage communication with stakeholders, and navigate legal implications, helping to restore trust and maintain operational continuity.

Learn more.

The firm’s premier Electronic Communications Privacy Act (ECPA) practice helps global technology leaders and rising startups respond to, and where appropriate, object to and litigate, requests for user data. Our lawyers counsel on and litigate cutting-edge issues at the intersection of user privacy and online communications, governmental surveillance and criminal investigations, and free speech and expression. 

Learn more.

Clients turn to us for assistance with complex commercial transactions in which data is a core part of the deal. Our team drafts and negotiates data protection agreements and other commercial agreements and counsels clients on the impact of data protection provisions in these agreements, including insurance, indemnity, and liability clauses. We also support mergers and acquisitions transactions for both buy-side and sell-side deals, which includes drafting privacy and security-related requests and disclosures, assessing potential compliance gaps and recommending mitigation measures, preparing privacy representations and disclosure schedules, and leading negotiations with counterparties on privacy and security issues. 

Learn more.