Find Lawyers in Georgia, United States for Privacy and Data Security Law
Practice Area Overview
Most privacy laws outside the United States are “omnibus privacy laws” that protect all types of personal data. These laws specify permitted uses of personal data and establish the conditions under which it is legitimate and lawful to process it. They are often supplemented by sectoral laws, for example for the protection of health care data.
The United States, on the other hand, does not yet have a national law that protects all categories of personal data, and instead has opted for a sectoral approach. It relies on a patchwork of state and federal laws that regulate some – but not all – categories of personal data. These laws tend to create limits on what can be done with the personal data collected, but there is little limitation on what can be collected. In most cases, all uses of personal data are permitted unless a law or regulation specifically prohibits them. In addition, the Federal Trade Commission and State Attorneys General play a significant role in defining acceptable practices.
Data privacy cannot exist without keeping data secure. Adequate security measures are necessary to protect the authenticity, confidentiality and integrity of information. Measures designed to provide data security are generally grouped in three categories: physical security measures, administrative security measures, and technical security measures. Data security laws tend to require companies to implement appropriate security safeguards. In addition, an increasing number of countries are adopting security breach disclosure laws that require entities to notify government agencies and the affected individuals, when a breach of security has caused the theft or unauthorized disclosure of personal data.
Attorneys working in the field of privacy and data security law help companies navigate the often-complex requirements of privacy and data security laws. They advise companies on a wide range of privacy and data security measures, assisting companies in ensuring that their data collection and processing practices, data transfer procedures, privacy policies, and marketing activities are compliant with the relevant domestic, international, privacy, and data security regulations and laws.
Kristy McAlister Brown is co-chair of the firm's Litigation & Trial Practice Group and leads the firm’s Privacy and Cybersecurity Litigation Practice Team. Ms. Brown focuses her practice on complex commercial litigation, with an emphasis on class actions and privacy and cyber litigation. She has defended putative class actions across the country and has a strong track record of defeating class certification—both at the trial and appellate levels. Ms. Brown is an experienced pr...
David Carpenter regularly advises clients, including Fortune 500 companies, on all aspects of commercial litigation from individual disputes to major consumer class actions. He helps his clients find cost-effective solutions as an alternative to trial whenever possible. He concentrates his practice in general business and commercial litigation, with special focus on consumer and privacy class action defense, business torts and contract disputes. David has served as lead counsel and assisted i...
Maki DePalo is a client advocate and a problem solver who leverages more than a decade of technical leadership and international business experience as an integral component of her law practice. She advises clients on global data privacy, cybersecurity, California Consumer Privacy Act of 2018 (CCPA) compliance programs, incident preparedness initiatives, and technology transactions, enabling businesses to successfully navigate new challenges in an ever-evolving digital landscape. Maki’s...
Kamal Ghali is a co-founder of Chaiken Ghali LLP, a former federal prosecutor, and a top-ranked business litigation and government investigations attorney. Over the last eighteen years, Mr. Ghali has handled some of the biggest criminal and civil cases in the country, including high-profile white collar criminal fraud investigations and trials; high-stakes business disputes involving racketeering (RICO) and fraud allegations in state and federal court; and a range of international cybersecuri...
Jim is a partner in the Technology and Privacy Group and co-chairs the firm’s Privacy & Security task force and the firm’s Cybersecurity Preparedness & Response Team . Jim’s practice involves board-level and enterprise-wide issues at the intersection of global cybersecurity, privacy, technology and data initiatives. Given his decades-long experience in the technology space, Jim was one of the first lawyers in the United States to focus on the criticality of privacy a...
Elizabeth ("Bess") Hinson is a privacy and cybersecurity attorney in Holland & Knight's Atlanta office. Ms. Hinson focuses her practice on cyber and data risk management and governance, breach preparedness and response, crisis management and global data privacy compliance. Ms. Hinson represents clients at all stages of incident response from investigation, notification, remediation, managing privacy class action risks, and defense of litigation and regulatory inquiry. She regularly counse...
David Keating focuses his practice on matters involving technology and data. David is one of the co-leaders of the Privacy & Data Security Practice at Alston & Bird. He has advised clients on privacy and security issues arising along the entire data lifecycle for more than 15 years. He assists clients with compliance strategies, policy development and implementation, data monetization and data use analyses, new product development, privacy and security issues in transactions, and priv...
Our Methodology
Recognition by Best Lawyers is based entirely on peer review. Our methodology is designed to capture, as accurately as possible, the consensus opinion of leading lawyers about the professional abilities of their colleagues within the same geographical area and legal practice area.
The Process
Best Lawyers employs a sophisticated, conscientious, rational, and transparent survey process designed to elicit meaningful and substantive evaluations of the quality of legal services. Our belief has always been that the quality of a peer review survey is directly related to the quality of the voters.