![Joseph P. Cutler](/sites/default/files/styles/portrait_4x5_360x450_1x/public/2024-08/Joseph%20P.%20Cutler.jpg?itok=2Vm1gXks)
![Joseph P. Cutler](/sites/default/files/styles/portrait_4x5_360x450_1x/public/2024-08/Joseph%20P.%20Cutler.jpg?itok=2Vm1gXks)
Joseph P. Cutler
- Firmwide Chair Fintech Industry Group; Firmwide Lead, Financial Services Compliance, Privacy, and Crime Prevention Vertical
Joe brings a diverse history of litigation, privacy, and financial services experience to counsel companies in the fintech, blockchain, and social media sectors.
Joe Cutler helps evaluate the regulatory exposure and compliance paths for emerging distributed ledger technology companies, cryptocurrency exchanges, and token-based projects. He provides guidance related to financial services, principally those involving money transmission, exchange, and emerging payment solutions. Joe also helps companies obtain state money transmission licenses, register with Financial Crimes Enforcement Network (FinCEN) as money services businesses, draft and implement anti-money laundering programs, and comply with state and federal financial privacy laws. His litigation work focuses on combating cybercrime and enforcing website terms of use.
Outside the financial services space, Joe counsels clients on compliance with state and federal privacy and data protection laws, including the California Consumer Privacy Act; anti-spamming and anti-phishing statutes; computer intrusion laws; state data protection and breach notification laws; international data protection laws, including the General Data Protection Regulation; and credit protection laws, such as the Fair Credit Reporting Act (FCRA) and Equal Credit Opportunity Act. He helps companies develop and implement information governance programs, counseling on financial services regulatory issues involving the Bank Secrecy Act, FinCEN, and Anti-Money Laundering (AML) requirements and state money transmission.
Blockchain. A leader in the blockchain space, Joe represented Washington state’s first licensed bitcoin company, CoinMe, and first cryptocurrency point-of-sale solution for the cannabis industry. He is working with cryptocurrency exchanges to obtain their money transmitter licenses and formalize the requisite internal governance to operate in the United States. Joe counseled 15 U.S. representatives and senators on ways to integrate blockchain technology into government functions to reduce bureaucracy and testified before Washington State House and Senate legislative committees considering legislation related to blockchain and cryptocurrency. Joe also represented clients under threat of enforcement by the Washington State Department of Financial Institutions.
Enforcement. Joe has a long history of working with social media companies. When security threats emerge, Joe manages a rapid response enforcement team to defend clients, such as Facebook, against illegal spamming, phishing, pretexting, and other forms of malicious internet behavior. He provides consumer protection compliance advice to companies regarding their obligations under the FCRA and fair debt collections practices statutes, primarily focusing on the protection and safeguarding of customer personal data.
Privacy. Joe has extensive experience in international data transfer laws, helping companies that want to transfer data across international boundaries to do so in compliance with transnational regulations. He also advises clients regarding operation of Sarbanes-Oxley Whistleblower programs in the EU and conducting U.S.-based litigation discovery in the EU. He joined the U.S. Department of Commerce's EU Privacy Shield certification program and counsels clients on compliance with EU directives on privacy, data protection, e-commerce, and electronic communications services. He also provides advice to companies regarding compliance with U.S. sanctions programs.
Pro bono work is central to Joe's practice, emphasizing refugee/asylum law and representing asylum-seekers at all levels of the immigration process. He also represented an inmate from the King County Regional Justice Center in a challenge to its medical treatment policies and procedures.
Education & Credentials
Education
- Georgetown University Law Center, J.D., cum laude, Associate Editor, Georgetown Journal of Legal Ethics, 2005
- University of Washington, B.A., Political Science and Philosophy, 2001
Bar and Court Admissions
-
Washington
- U.S. District Court for the Western District of Washington
Related Employment
- Georgetown Institute for the Study of International Migration, Washington, D.C., Researcher, 2004-2005
- Perkins Coie LLP, Seattle, WA, Summer Associate, 2004
- Human Rights Watch, Africa Division, New York, NY, Klatsky Legal Fellow, 2003
Additional Languages
- Spanish
Professional Recognition
Recognized in Blockchain & Cryptocurrencies Law by Chambers FinTech Guide, 2022-2024
Listed in Lawdragon 500 Leading Global Cyber Lawyers, 2024
Ranked by Chambers USA as a Tier 3 Lawyer in Blockchain/Crypto Law, 2021
Center for Computer-Assisted Legal Instruction (CALI) Excellence Award in Professional Responsibility
Listed in Super Lawyers Magazine as a "Washington Rising Star," 2014-2016
Impact
Professional Leadership
- Digital Currency & Ledger Defense Coalition, Participating Lawyer
- Federal Bar Association
- J. Reuben Clark Law Society, Curriculum Editorial Board Member
- J. Reuben Clark Law Society, Georgetown University Law Center Chapter, Co-President, 2004-2005
Community Involvement
- Help Africa Relief and Development Inc., Vice President 2002-2007
Insights
News
Professional Experience
Privacy & Security
Internet Enforcement—Facebook and Amazon
Provide ongoing management of a complete enforcement program for Facebook and Amazon to enforce their terms; combat fraud; prosecute spammers, hackers and phishers; and to investigate and refer illegal behavior to law enforcement.
Privacy Assessments
Conducted thorough assessments of the privacy and data security practices of various clients that collect and process personal data. Clients include a major wireless telecommunications provider, a rural telecommunications provider, a speech recognition software provider, a major medical and optical device manufacturer, an automated kiosk provider and a video game manufacturer. The assessments consisted of extensive interviews with client personnel, reviews of contracts with third parties and production of a report with recommended improvements.
Information Governance
Provide counsel related to the structure and content of information governance policies and procedures. Develop and implement comprehensive information management frameworks, including drafting information governance policies, related privacy and security programs, and implementation procedures. Also have experience tailoring these frameworks to applicable standards (NIST, ISO, etc.). Clients include a large gaming company, international technology backbone provider, large medical and consumer optical device manufacturer, and retail kiosk provider.
Counseling: Security Breach Notification Laws
Supervised the revision of the security breach notification laws chart, which surveys the state laws that require notification in the event of security breaches involving the loss of personal data. Assisted numerous companies to respond appropriately to actual and suspected data breaches, including system intrusion, lost laptops, compromised data centers and rogue employee disclosures.
Counseling: International Transfers of Personal Data
Provide counsel to clients regarding the EU Directives on privacy, data protection, e-commerce and electronic communications services; specifically focused on methods of transferring personal data collected in the EU to other countries that are not deemed adequately protected by EU data protection authorities. Work with clients to structure transfer agreements and arrangements to comply with EU data protection laws.
EU Privacy Shield Certifications
Developed a due diligence worksheet and guide for clients applying for certification in the U.S. Department of Commerce's EU Privacy Shield Program. Ongoing compliance counseling regarding Privacy Shield obligations. Clients successfully certified include a major video game manufacturer, an online visual charting service, e-commerce retailers and a complex transaction between a major technology manufacturer and its subsidiaries for human resource data and an international web technology company.
Counseling: Consumer Protection
Provide counsel to clients regarding compliance with the Fair Credit Reporting Act, including amendments requiring full implementation of Red Flag identification programs to combat identity theft and amendments addressing affiliate sharing of data for marketing purposes. Provide counsel regarding appropriate collections practices under the Fair Debt Collections Practices Act to a major wireless carrier.
Electronic Financial Services
Counseling: Money Transmission and Anti-Money Laundering
Provide comprehensive counseling regarding compliance with state and federal money transmission laws as they relate to emerging payment systems, and in particular blockchain, cryptocurrency and digital assets ventures. Develop and implement anti-money laundering programs, conduct related risk assessments and represent clients before state and federal regulators like FinCEN and state departments of financial services. Working with several large digital currency exchanges to obtain their state money transmitter licenses. Helped CoinMe, a bitcoin kiosk company, obtain the first money transmission license issued by the State of Washington. Presented multiple companies to the Washington Department of Financial Institutions and other state regulatory agencies.
Advising Government on Blockchain
Advised 15 U.S. House Representatives and Senators on ways to integrate blockchain technology into government functions to reduce bureaucracy. Co-chairing the state working group for the Chamber of Digital Commerce. Testified before Washington State House and Senate legislative committees considering legislation related to blockchain and cryptocurrency. Testified in opposition to a Washington State legislative bill that would ban the use of virtual currency in cannabis transactions.
Litigation
Twitch v. Bouchouev
U.S. District Court for the Northern District of California
Helped lead Twitch’s multi-defendant suit aimed at stopping programmers from utilizing “viewbots” to artificially boost the number of “viewers” in Twitch broadcaster streams.
MTACC Inc. v. Benjamin Lawsky and the New York Department of Financial Services
U.S. District Court for the Western District of Washington
Represented MTACC Inc. in a declaratory judgment action seeking to clarify the scope of New York’s money transmission statute as it applied to MTACC.
Facebook Inc. v. Martin Grunin
U.S. District Court for the Northern District of California
Helped successfully prosecute and obtain a $415,000 judgment against an individual who had abused Facebook’s advertising services and breached Facebook's Terms of Use.
Facebook Inc. v. Adscend Media, LLC, et al.
U.S. District Court for the Northern District of California
Represented Facebook in prosecution of an affiliate advertising network that had paid for and encouraged its affiliates to breach of Facebook's Terms of Use by spamming its users.
Facebook Inc. v. Steven Richter
U.S. District Court for the Northern District of California
Successfully prosecuted and obtained a $175,000 stipulated judgment against Steven Richter for abusing Facebook’s trademarks and running a deceptive spamming advertising campaign.
Facebook Inc. v. Jason Swan
U.S. District Court for the Northern District of California
Represented Facebook in prosecution of an individual who created deceptive websites and advertising campaigns that breached Facebook's Terms of Use, and spammed its users.
Facebook Inc. v. Maxbounty, Inc.
U.S. District Court for the Northern District of California
Represented Facebook in prosecution of an affiliate advertising network that had paid for and encouraged its affiliates to breach of Facebook's Terms of Use by spamming its users.
Facebook Inc. v. Jeremy Fisher; Philip Porembski; Ryan Shimeall, et al.
U.S. District Court for the Northern District of California
Successfully prosecuted and obtained a $360.5 million judgment against Philip Porembski for running a major phishing and spamming attack on Facebook users.
Facebook Inc. v. Banana Ads, et al.
Helped bring suit against more than 20 defendants who registered and used domain names incorporating Facebook’s trademarks or deliberate misspellings of Facebook’s trademarks (cybersquatting or typosquatting). The client obtained default judgments awarding statutory damages of $2.8 million and requiring transfer of dozens of infringing domain names to Facebook.
Facebook Inc. v. Power.com, et al.
U.S. District Court for the Northern District of California
Represented Facebook in prosecution of an aggregation website for copyright and trademark infringement as well as breach of Facebook's Terms of Use.
Facebook Inc. v. Sanford Wallace, et al.
U.S. District Court for the Northern District of California
Successfully prosecuted and obtained a $711 million judgment against Sanford Wallace, the self-proclaimed "Spam King," for initiating a major phishing and spamming attack on Facebook users.
Facebook Inc. v. Istra Holdings, et al.
U.S. District Court for the Northern District of California
Represented Facebook in prosecution of an adult entertainment website operator to prevent computer fraud and abuse, SPAM and tortious interference with Facebook's business interests.
In re A. B.
Board of Immigration Appeals
Represented a juvenile asylum-seeker from Mexico in successful appeal before the Board of Immigration Appeals; successfully secured adjustment to long-term permanent resident status.
In re N. O.
U.S. Department of Homeland Security, Citizenship and Immigration Services
Represented an asylee from Somalia in successful application to adjust her status to long-term permanent resident.
T-Mobile USA Inc. v. AccuSearch Inc.
King County Superior Court (Washington)
Represented T-Mobile in prosecution of "pretexting" action; successful TRO, settlement and permanent injunction.
T-Mobile v. First Revenue Assurance
Represent T-Mobile in recovery of outstanding collections agency remittances.
Wisconsin Electric Power Company v. United States
U.S. Court of Federal Claims
Pre-trial briefing for major government contracts dispute involving the disposal of spent nuclear fuel from power plants.
Telus Communications Company v. Doe
U.S. District Court for the Northern District of California
Represented plaintiff in action to identify perpetrators of phishing scheme.
Think Computer Corp. v. Dwolla, Inc., et al.
U.S. District Court for the Northern District of California
Obtained dismissal for CoinLab from case alleging unfair competition, unjust enrichment and gross negligence for allegedly failing to obtain a money transmitter license in California.
Technology Transactions & Privacy
Rural Cellular Corporation Custom Model License Agreement
Developed and negotiated confidentiality and security clauses for custom model license agreement with consumer reporting agency.