SGR’s Cybersecurity and Data Privacy Practice is focused on assisting our clients with implementing industry best practices for data privacy and security matters as well as meeting related compliance obligations under federal and state laws. Because concerns over privacy and data security continue to grow as businesses and consumers conduct more of their activities using online means and with electronic devices, compliance obligations arise in numerous settings and for companies in virtually every industry segment.

Cybersecurity matters with which we regularly assist our clients include:

• Data breach assessments
• Employee privacy and monitoring issues
• Coordination of federal and state data breach incident responses
• State and federal consumer data breach notices
• Governmental agency notices and investigations for covered data incidents
• HIPAA and other healthcare regulatory compliance matters
• Development of required security protocols and policies
• Preparation of online and off-line privacy policies
• Cybersecurity Compliance with CAN-SPAM, COPPA, TCPA, and other federal statutes
• PCI compliance obligations
• Review/negotiation of customary data and security protections in key contracts
• Data mining, handling, storage, transmission practices, and security
• US-EU Privacy Shield compliance
• Due diligence review of data privacy and cybersecurity concerns for business acquisitions
• Harmonizing consumer-targeted marketing practices with privacy concerns