Home - Blank Rome LLP

<p>Register to receive insights and analyses on breaking news and trends across varying industries.</p>
<p><a class="link-primary mt-4" href="/subscribe">Subscribe</a></p>


Philadelphia, PA

New York, NY

Wilmington, DE

Cincinnati, OH

Princeton, NJ

Los Angeles, CA

Houston, TX

Tampa, FL

Shanghai

South Florida

Pittsburgh, PA

Washington, D.C.

Chicago, IL

Orange County, CA

Dallas, TX

Boston, MA

To succeed in today’s business world, it is critical that companies strategically prioritize digital assets, navigate an ever-expanding web of nuanced privacy rules, and protect confidential information from the onslaught of malicious cyberattacks, breaches, and other threats.

core/paragraph

core/quote

Blank Rome’s national team of experienced privacy, security &amp; data protection attorneys have spent decades at the cutting edge of technology helping clients navigate the patchwork of data privacy laws and myriad of issues posed by digital technologies, IT, outsourcing, marketing, and data rights transactions in a variety of sectors from healthcare, pharmaceutical, and medical devices to the e-commerce, consumer goods, financial services, and FinTech industries.

Our multidisciplinary team of leading cybersecurity and data privacy professionals advises clients on the potential consequences of cybersecurity threats and how to implement comprehensive measures for mitigating cyber risks, prepares customized strategy and action plans, and provides ongoing support and maintenance to promote cybersecurity awareness.

We not only know the law, we know the businesses and industries in which our clients operate. This helps us understand and achieve their business objectives by taking a holistic approach that seamlessly integrates the firm’s comprehensive services in corporate, intellectual property and technology, maritime, aviation, healthcare and life sciences, insurance recovery, government contracts, and litigation.

core/heading

Our privacy, security &amp; data protection team understands business and technology. We draw on a bench of attorneys with significant experience in a variety of industries who understand the challenges faced by our clients. We are able to assist clients to structure and execute strategies that solve problems, seize opportunities, and achieve business goals while addressing data privacy and security compliance issues. We anticipate trends to structure business deals and position innovative products to best position our clients in the market amidst a challenging regulatory landscape.

Members of our privacy, security &amp; data protection team are certified as information privacy professionals in the United States and Europe by the International Association of Privacy Professionals (“IAPP”).

Draft and negotiate complex technology and cloud transactions, data licensing, and strategic IT commercial agreements and develop vendor management policies and playbooks.

core/list-item

Develop, draft, and implement privacy, security, and data protection agreements, policies, and “best practices.”

Administer internal compliance and risk assessments.

Evaluate and enhance cyberinsurance policies and respond to attempts by insurers to deny coverage for cyber losses.

Handle data breach response and litigation.

Assist government contractors in protecting Unclassified Controlled Technical Information (“UCTI”), Covered Defense Information (“CDI”), export-controlled information, and trade secrets.

Provide breach and security incident response coaching to assist in mitigating cyber risk.

Advise companies on administrative and regulatory audits and handle governmental agency inquiries and investigations.

Advise companies on data governance and privacy regulations in connection with product launches.

Advise on privacy, security, data management, and online advertising issues.

Advise clients on data privacy and security risks in mergers and acquisitions.

Assist with leveraging and protecting the value of data in e-commerce arrangements, strategic alliances, and joint ventures.

Develop privacy statements and advise on privacy issues relating to behavioral and targeted advertising.

Prepare online and in-person training modules.

Prosecute and analyze patents that relate to data privacy and cybersecurity systems.

core/list

We assist clients to inventory data collection and use practices, identify relevant legal frameworks, and ascertain and remediate gaps in compliance to develop data-centric compliance programs that anticipate regulatory enforcement and litigation issues and are consistent with business needs. The privacy, security &amp; data protection team counsels clients on compliance with state, federal, and international laws and regulations, as well as pending legislation, related to data governance and personally identifiable information, including:

Health Insurance Portability and Accountability Act (“HIPAA”) and Health Information Technology for Economic and Clinical Health Act (“HITECH”)

State laws governing use and disclosure of personal health information

California Consumer Privacy Act of 2018 (“CCPA”)

Virginia Consumer Data Protection Act (“VCDPA”)

EU General Data Protection Regulation (“EU GDPR”)

EU Privacy and Electronic Communications Directive (“ePrivacy Directive”)

Illinois Biometric Information Privacy Act (“BIPA”) and other state laws governing the collection and use of biometric information

Children’s Online Privacy Protection Act (“COPPA”)

Fair Credit Reporting Act (“FCRA”) and Fair and Accurate Credit Transactions Act (“FACTA”)

Drivers Privacy Protection Act (“DPPA”)

Video Privacy Protection Act (“VPPA”)

Telephone Consumer Protection Act (“TCPA”)

Family Educational Rights and Privacy Act (“FERPA”)

Electronic Communications Privacy Act (“ECPA”), Stored Communications Act (“SCA” and state recording laws

Non-Fungible Tokens (“NFTs”) & Digital Assets

Information Technology (“IT”) Transactions

Technology

Biometric Privacy

Data, Data Analytics, and AI: Licensing, Litigation, and Regulation

Data Centers

Luxury Brands

FinTech

Cybersecurity

Data Privacy

Software

Glen L. Abramson

Yelena M. Barychev

Lawrence J. Beaser

Shaun J. Bockert

Harrison Brown

Jayme L. Butcher

Lisa M. Campisi

James S. Carter

Cheryl S. Chang

Justin A. Chiarodo

Michael Carl Cohen

Timothy W. Dickens

P. Gavin Eastgate

Dennis M.P. Ehling

Emanuel Faust

Gabrielle N. Ganze

Ira L. Herman

Margaret Anne Hill

Michael A. Iannucci

Elizabeth N. Jochum

Basileios Katris

Gregory F. Linsin

Domingo Manuel LLagostera

Stacy H. Louizos

Joseph T. Moran

Melissa Fundora Murphy

Adam V. Orlacchio

Ameya V. Paradkar

Daniel R. Peterson

Joseph G. Poluka

Daniel E. Rhynhart

Jeffrey Rosenfeld

Jeffrey N. Rosenthal

Daniel R. Saeedi

Rachel L. Schaller

Karen H. Shin

Deborah A. Skakel

Lisa Casey Spaniel

Jillian M. Taylor

Peter I. Tsoflias

Jared Zola

Illinois Opens for Public Comment Proposed Regulations Implementing the Use of AI in Employment Act

Blank Rome Attorneys Recognized in the 2026 Lawdragon 500 Leading Global Cyber Lawyers

The BR Privacy, Security & AI Download: May 2026

Seventh Circuit Issues Seminal Decision Holding BIPA Amendment Applies Retroactively

Sharon R. Klein, Todd M. Malynn, and Alex C. Nisenbaum Named 2026 Life Sciences Visionaries by Los Angeles Times Studios

From the Boardroom to the Courtroom: Navigating Risk in the Era of Privacy and Data Breaches

Let’s Give ’Em Something to Talk About: The Rise of AI Chatbots

New Washington Law Offers Partial Relief from Email Subject Line Lawsuits: What Retailers Need to Know

How the FTC’s COPPA Policy Statement Promoting Responsible Age-Verification Practices Impacts Companies

The BR Privacy, Security & AI Download: April 2026

When AI Takes Notes: Protecting Privilege, Privacy, and Professional Obligations

AI, Privilege, and Work Product: Conflicting Federal Decisions Create a New Risk Frontier

The BR Privacy, Security & AI Download: March 2026

Social Media Trial Sparks Reckoning for Product Design

5th Circuit Rejects FCC Rule, Says TCPA Allows Any Kind of Consent for Marketing Calls

Fifth Circuit Confirms: Oral Consent Is Enough Under the TCPA

Making AI Work: Identifying and Mitigating Liability, Managing Risks, and Mastering Prompts

Peaks and Pitfalls of AI in Practicing Law: Where We Are and Where We’re Heading

The BR Privacy & Security Download: February 2026

Tiktok’s ‘Immigration Status’ Collection — Here’s What It Means

Cyber Insights 2026: What CISOs Can Expect in 2026 and Beyond

Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements

DOJ Announces Record-Breaking False Claims Act Recoveries in FY 2025: What the Stats Portend for 2026

Blank Rome Welcomes New Business Litigation Of Counsel Glen L. Abramson in Philadelphia

Top Healthcare AI Trends in 2026

The BR Privacy & Security Download: January 2026

The BR Privacy & Security Download: December 2025

Litigation and Employment Issues for In-House Counsel 2025

Trump Eyes Executive Order to Rein in Patchwork State AI Policies

California’s New Privacy Law Specialization Is a Pragmatic Move

Steps to Address the New California Audit Rule That Seeks to Reset Reasonable Security

Litigation and Employment Law Issues for In-House Counsel CLE Event 2025

Protecting Your Likeness from AI: What You Need to Know

The BR Privacy & Security Download: November 2025

California’s ADMT Regulations Reshape the AI Business Landscape

Label Me Maybe: Making AI Transparent (and Comply with Disparate Laws)

International Bar Association Annual Conference 2025

The BR Privacy & Security Download: October 2025

CJEU Refines Scope of ‘Personal Data’ in Pseudonymization Process for EU Institutions

Protecting Your Assets with Cyber Insurance

Neon, the No. 2 Social App on the Apple App Store, Pays Users to Record Their Phone Calls and Sells Data to AI Firms

London Market Multinational Coverage 2025—Global Risks: When Cyber and War Collide

The BR Privacy & Security Download: September 2025

AI ‘Deadbots’ Are Persuasive — And Researchers Say They’re Primed for Monetization

White House Data Sharing Plan Boasts Big Ambitions, but Has Scant Details

Navigating Three New State Laws That Require Apple and Google App Stores to Check All Users’ Ages

The BR Privacy & Security Download: August 2025

California Finalizes CCPA Regulations on Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking: Key Provisions and Implications

New California Privacy Assessment Rules Spur Compliance Scramble

Innovation Over Regulation—Trump Unveils America’s AI Action Plan

The Evolving Legal Landscape, AI and Beyond

Growing Data Breach Disputes Require Sharp Eye on Contract Terms

Temu Lawsuits Pit States Against a Digital Superpower

Europe’s Privacy Groups Take on Big Tech with Class Action Cases

Ninth Circuit Upholds Converse’s Win in CIPA Chat Case: What the Gutierrez v. Converse Decision Means for Online Businesses

The BR Privacy & Security Download: July 2025

Ninth Circuit Scrutinizes California Wiretap Law: Will Website Chat and Analytics Survive Legal Challenge?

180 Days of the Trump Administration—Quick Hits on Executive Orders, Actions, and Policies

In a Data-Obsessed World, Attorneys Welcome Privacy Law Specialization

Breaking—Supreme Court Unanimously Lowers Bar for “Reverse Discrimination” Claims: Ames v. Ohio Department of Youth Services Redefines Title VII Litigation

California SB 690 Passes California’s Senate, Signaling a Major Step in Redefining Privacy Law and Limiting CIPA Litigation for Online Businesses

AI Personal and Professional Tips

The BR Privacy & Security Download: June 2025

Texas AG’s Billion-Dollar Settlement With Google Highlights Biometric Data Use Compliance Considerations

Law School for the CFO

Transportation Industry Discussion and Networking Reception

Trade Secrets and IP Policy Challenges in the Evolving Landscape of Generative AI

How to Incorporate AI into Your Daily Practice Without Violating the Rules of Professional Conduct

The Clone Wars: A New Congress Reconsiders the NO FAKES Act to Combat Digital Deepfakes

The BR Privacy & Security Download: May 2025

Sharon R. Klein, Alex C. Nisenbaum, and Philip N. Yannella Recognized in the 2025 Lawdragon 500 Leading Global Cyber Lawyers

Philip N. Yannella Publishes 2025 Edition of Cyber Litigation: Data Breach, Data Privacy & Digital Rights with Thomson Reuters

AI in the ABL Industry—Opportunities and Barriers

From Over the Pond: The European Union’s Comprehensive AI Legislation Comes to America

Utah Data Sharing Law Creates Path to Upend Social Media Model

The BR Privacy & Security Download: April 2025

Evolving Theories for Online Tracking Litigation in Illinois

HHS OCR Releases Notice of Proposed Rulemaking to Expand Cybersecurity Protections for ePHI

International Trade Secret Litigation

Privacy and Artificial Intelligence Litigation: Anticipating Trends to Minimize Exposure

Navigating the Legal Landscape: Key Challenges for Spa Leaders

The BR Privacy & Security Download: March 2025

After Illinois BIPA Amendment, Confusion Lingers Until Higher Courts Rule

The State of AI: A VO Industry Panel

Cybersecurity: Protecting Yourself and Your Business

DOGE Access to CMS Data

Cyber Insights 2025: The CISO Outlook

Healthcare and the New Trump Administration: Navigating the Evolving Regulatory Landscape; Client Advisory Strategies

The BR Privacy & Security Download: February 2025

Massachusetts Plaintiffs Pivot to Save Health Site Privacy Suits

Privacy, Security & Data Protection

Privacy, Security & Data Protection

Offices

Stay Connected

Slide Menu

Slide Search

Offices

Stay Connected