Faegre Drinker Biddle & Reath LLP, a Delaware limited liability partnership | This website contains attorney advertising.

Privacy, Cybersecurity, Data Ethics & Strategy

Overview

Faegre Drinker helps clients meet the challenges of the information age. Organizations collect, use and share ever-increasing amounts of data, raising privacy, security, information governance and other data ethics issues. Our team of attorneys and professionals helps clients build strong data governance programs that support compliance with applicable laws and agile responses to security incidents. 

We help organizations understand the array of laws and guidelines applicable to their data processing. This includes requirements concerning privacy (to what extent can individuals control the use and disclosure of information that relates to them), security (what safeguards are required to protect the confidentiality, integrity, and availability of data assets), transparency (to what extent do organizations need to be transparent about how they are collecting and using personal data), ownership (who owns personal data and information derived from personal data) and fairness (does the outcome of data analysis result in disparate impacts to a specific group of people in a way that causes harm). These issues have been a central part of “data protection” law for decades and are growing in importance as regulators struggle to address new, data-intensive technologies like artificial intelligence.

Faegre Drinker’s multidisciplinary privacy, cybersecurity, data ethics and strategy team assists organizations in understanding their information flows and creating compliant policies and procedures. We help clients close M&A deals and draft complex data agreements and security provisions. And when incidents threaten a client’s business reputation, we are here to help. We litigate class-action lawsuits, respond to data breaches, answer regulator inquiries, and deliver peace of mind when a crisis arises.

We advise organizations on a wide body of rapidly evolving data laws, regulations and standards, such as:

  • U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA), Colorado Privacy Act (CPA), Illinois Biometric Information Privacy Act (BIPA) and Washington My Health My Data Act.
  • U.S. federal privacy laws, such as the Federal Trade Commission (FTC) Act, Telephone Consumer Protection Act (TCPA), Health Insurance Portability and Accountability Act (HIPAA), Family Educational Rights and Privacy Act (FERPA), Fair Credit Reporting Act (FCRA) and Gramm-Leach-Bliley Act (GLBA).
  • UK and EU data protection and e-privacy laws, such as the General Data Protection Regulation (GDPR) and ePrivacy Directive.
  • China’s Personal Information Protection Law (PIPL), Cybersecurity Law (CSL) and Data Security Law (DSL).
  • Standards, such as the Payment Card Industry Data Security Standards (PCI DSS), International Organization for Standardization (ISO) 27001, and National Institute of Standards and Technology Cybersecurity Framework (NIST CSF).
  • Pending legislation, such as the EU AI Act and privacy bills at the U.S. state and federal levels.
     

Insights & Events

Latest

Media Mentions January 2026

Charles Westerhaus Provides Insight for IAPP’s Cybersecurity Law Key Terms Resource

1 min read
Updates January 2026

State & Local Employment Law Developments: Q1 2026 (and Beyond)

New Employee Protections and Employer Obligations in California, Colorado, Connecticut, Delaware, District of Columbia, Illinois, Louisiana, Maine, Minnesota, Montana, New Hampshire, New York, North Carolina, Oklahoma, Oregon, Pennsylvania, Rhode Island, Texas, and Washington
18 min read
Podcast December 2025

Transforming Waste Into Climate Assets and Solutions

Deanna’s Dialogues: Navigating Carbon Sustainability
2 min read
Updates December 2025

Executive Order Outlines a Future Federal AI Policy That May Preempt State Laws

Employers Should Stay Compliant With Current State AI Laws Until Further Notice
5 min read
Podcast December 2025

Securing Sustainability: Digitizing Trust and Impact in Carbon Markets

Deanna’s Dialogues: Navigating Carbon Sustainability
2 min read
Speaking Engagement Recap November 07, 2025

Data, Dangers, & Developments in Drug Supply Chain Security & Safety

American Society for Pharmacy Law: 2025 Developments in Pharmacy Law
1 min read
Speaking Engagement Recap October 17, 2025

Privacy and Genetic Data

European Health Data Protection Congress
1 min read
July 30, 2025

Life Insurance Anti-Fraud Training

1 min read
Press Release July 2025

Cynthia Lee Rejoins Faegre Drinker’s Benefits & Executive Compensation Practice as Counsel in Minneapolis

2 min read
News December 2024

Faegre Drinker Attorneys Recognized in 2024 Lexology Index Reports

3 min read
Insights
Media Mentions January 2026

Charles Westerhaus Provides Insight for IAPP’s Cybersecurity Law Key Terms Resource

1 min read
Updates January 2026

State & Local Employment Law Developments: Q1 2026 (and Beyond)

New Employee Protections and Employer Obligations in California, Colorado, Connecticut, Delaware, District of Columbia, Illinois, Louisiana, Maine, Minnesota, Montana, New Hampshire, New York, North Carolina, Oklahoma, Oregon, Pennsylvania, Rhode Island, Texas, and Washington
18 min read
Podcast December 2025

Transforming Waste Into Climate Assets and Solutions

Deanna’s Dialogues: Navigating Carbon Sustainability
2 min read
Updates December 2025

Executive Order Outlines a Future Federal AI Policy That May Preempt State Laws

Employers Should Stay Compliant With Current State AI Laws Until Further Notice
5 min read
Podcast December 2025

Securing Sustainability: Digitizing Trust and Impact in Carbon Markets

Deanna’s Dialogues: Navigating Carbon Sustainability
2 min read
Updates December 2025

European Union’s Digital Omnibus Package, Part II — Changes to the GDPR and the Data Act

Key Changes Relevant to U.S. Businesses
9 min read
Blog Post December 2025

Wintermute Arrives: AI-Orchestrated Cyber Espionage Becomes Reality

Discerning Data blog
1 min read
Updates November 2025

The European Union’s Digital Omnibus and Its Impact on Artificial Intelligence

Significant Proposed Changes to Legislation Covering AI, Data Privacy and Cybersecurity
7 min read
Updates November 2025

Potential Challenges to State AI Laws; Senate Hearing on AI; and More Developments

Artificial Intelligence Briefing
6 min read
Updates October 2025

Decision of the UK Information Commissioner’s Office Tribunal on Clearview AI

Alleged Breaches of the UK General Data Protection Regulation (GDPR)
6 min read

Meet The Team

Meet The Full Privacy, Cybersecurity, Data Ethics & Strategy Team