Paul Luehr partners with clients to optimize their privacy and cybersecurity practices, from risk management to incident response. As the leader of the firm's privacy and cybersecurity team, Paul understands that cybersecurity crises can be profoundly costly, and they can strike organizations across a wide range of industries. Drawing from 25 years on the cutting edge of data privacy and cybersecurity — including experience investigating and prosecuting cybercrimes with the Federal Trade Commission (FTC) and the Department of Justice (DOJ) — Paul helps clients avoid becoming a cautionary tale. He has led investigations into several of the top data breaches on record.
Paul has overseen forensic teams on data incidents affecting national retailers, financial institutions, hospitals and national health care companies, universities, hotel chains, defense contractors, and online providers. Paul’s insights have been featured on CBS, NBC, CNBC and BBC television, and in The Wall Street Journal, The New York Times and USA Today.

Federal Trade Commission and Department of Justice

Paul began his legal career at the FTC, where he served as a trial attorney and assistant director and became a foundational member of the agency’s internet team. He then joined DOJ as a federal cybercrime prosecutor, where he trained prosecutors and agents on cyber investigations and led cases related to computer intrusions, email threats, internet fraud and identity theft, phishing schemes, software piracy, and criminal trademark infringement. Immediately following September 11, 2001, Paul oversaw the initial investigation into computer evidence related to the terrorist Zacarias Moussaoui. Meanwhile, he served on the U.S. Internet and Telemarketing Fraud Task Force, DOJ’s Computer Crimes (CTC) Working Group, the U.S.-Canada Cross-Border Fraud Working Group and the U.S. Anti-Spam Task Force.

Past Private Sector Experience

Drawing on his in-depth regulatory experience, Paul joined Stroz Friedberg as a consultant and, over time, served as general counsel, chief privacy officer, and executive managing director as the data risk management firm grew to global prominence with 14 offices and over 500 employees. He assisted boards, CEOs, CISOs, chief privacy and compliance officers, and counsel with many incident response and internal investigations, and presented technical findings to numerous state and federal agencies. He also logged years of experience mining digital evidence related to privacy and security assessments, high-stakes litigation, trade secret disputes, global FCPA investigations, eDiscovery issues and online advertising.

Personal Interests

Paul stays active outside of work with many hobbies including running, participating in triathlons, singing a capella and reading mysteries.


Bar Admissions

District of Columbia


UCLA School of Law
J.D. Faculty Committee, Student Body Secretary (1992)

Harvard University
B.A. magna cum laude (1986)

Insights & Events

Other Perspectives
  • UK Supreme Court Rules in Google’s Favor in Data Privacy Group Litigation with Major Implications for Data Breach Cases
    Republished in Privacy & Cybersecurity Law Report, April 2022
  • We are Family - Data Governance and the Board
    Speaker, Faegre Baker Daniels Privacy and Cybersecurity Summit, November 2019
  • Welcome to the Jungle - Incident Response and Cybersecurity 
    Speaker, Faegre Baker Daniels Privacy and Cybersecurity Summit, November 2019
  • Data Privacy and Information Security
    Co-Presenter, FaegreBD 2018 Construction Law Summit – Minneapolis, Minneapolis, MN, November 2018
  • Cybersecurity
    FaegreBD General Counsel Forum, Minneapolis, MN, October 2018
  • School of Block(chain)
    Co-Presenter, 3M Legal Seminar, Woodbury, MN, October 2018
  • Cybersecurity: A Legal Perspective
    USBank Cybersecurity Seminar, Minneapolis, MN, October 2018
  • Safety First Cybersecurity Update
    Co-Presenter, FaegreBD Cybersecurity Summit, Minneapolis, MN, October 2018
  • I See Blue Skies. . .What’s Ahead in Privacy and Cybersecurity
    Moderator, FaegreBD Cybersecurity Summit, Minneapolis, MN October 2018
  • Mobile Banking: Cybersecurity, Privacy, and Big Data Implications
    CapitalOne Seminar, McClean, VA, September 2018
  • Cutting-Edge Developments in Technology: Legal and Practical Consequences
    NOHLGA Legal Seminar, New York, NY, July 2018
  • Data Security: Responding to Government Requests for Data
    Minnesota CLE Webcast, Minneapolis, MN, July 2018
  • Navigating Cybersecurity Risks and Challenges: A Primer for Nonprofits
    Co-Presenter, Webinar, May 2018
  • International Business Briefing: Preparing for the New Global Privacy Standard
    Co-Presenter, FaegreBD Webinar, Minneapolis, MN, May 2018
  • Preparing for the New Global Privacy Standard
    Co-Presenter, FaegreBD Seminar, Minneapolis, MN, and Chicago, IL, April 2018
  • Healthcare, Medical Devices and Cybersecurity
    Co-Presenter, Zimmer Legal Seminar, Warsaw, IN, April 2018
  • Cybersecurity Governance: Best Practices
    Navigating the 2018 Annual Report and Proxy Season Seminar - FaegreBD, Minneapolis, MN, January 2018
  • Weathering the Storm: How to Navigate Through Turbulent Changes in Privacy & Cybersecurity

    Co-presenter, Association of Life Insurance Counsel (ALIC) Regional Roundtable, AllState Campus, Northbrook, IL, October 2017
  • Using and Managing Data in a Franchise Network: Don't Be Left Behind, Part 2
    Co-presenter, FaegreBD webinar, October 2017
  • Barbarians at the Gate: Managing Your Privacy and Cybersecurity Risks 
    Panelist, 2017 M&A Conference, Minneapolis, MN,October 2017
  • IT for In-House Counsel 
    Co-presenter, IT Bootcamp for In-House Counsel, MinnCLE, Minneapolis, September 2017
  • Cybersecurity 
    Panelist, The Entrepreneurship Institute, President’s Symposium, University of Chicago, September 2017
  • Digital Investigations: Making the Most of Technology
    Guest Lecturer, St. Thomas University Law School, Minneapolis, MN, August 2017
  • Privacy & Cybersecurity: Trends in the Financial Services Industry 
    CLE for Athene USA Legal Department, Des Moines, IA, August 2017
  • Privacy & Cybersecurity: Why it Matters in Mergers & Acquisitions 
    FaegreBD Iowa M&A Conference, Des Moines, IA, July 2017
  • Data, Healthcare, and Ethics in a Changing Economy 
    Clarion Legal CLE, Optum Campus, Eden Prairie, MN, June 2017
  • Cybersecurity — Analysis of Case Studies by Two Former Regulators and an In-House Counsel
    Co-presenter, Fifth Annual Corporate Counsel Forum, Drake University Law School, June 2017
  • Cybersecurity — The Good, The Bad and The Ugly
    The Brief in The London Times, May 2017
  • Cybersecurity: Managing the Risk — Cyberattack Simulation
    Co-presenter, Practicing Law Institute Eighteenth Annual Institute on Privacy and Data Security Law, New York, NY May 2017
  • Server Room to Boardroom to Ballot Box — Cybersecurity Lessons From the U.S.
    Co-presenter, FaegreBD Client Roundtable, London, U.K., May 2017
  • Managing Retail Data Breaches
    Panelist, Incident Response Forum, Washington, D.C., April 2017
  • Ethics in the Non-Profit Sector: Data and Information Asset Protection
    Columbia University, April 2017
  • Top Buzzwords in 2016-17: More IT for Lawyer
    Co-presenter, Midwest Legal Conference on Privacy and Security, Minneapolis, MN, January 2017
  • Security Standards Across Sectors
    Co-presenter, Privacy & Security Forum, Washington, D.C., October 2016
  • Ransomware and Cyber Attacks in the Health Care Sector
    Co-presenter, American Health Lawyers Association Annual Meeting, Denver, CO, June 2016; Webinar, October 2016
  • Don't Compromise. Allow Corporate Content Sharing Without Sacrificing Security
    Co-presenter, Interlinks Webinar, October 2016
  • Cyber Security
    Co-presenter, National Association of the Attorneys General/National Association of State Charity Officers (NAAG/NASCO) Annual Meeting, Washington, D.C., October 2016
  • The Threat Landscape 
    Co-presenter, PLI Cyber Summit, New York, NY, September 2016
  • Responding and Recovering From an Incident
    Middle Tennessee ISACA Meeting, Nashville, TN, August 2016
  • Law Firm Data Security- Keeping You and Your Clients' Data Safe
    Co-presenter, Federal Bar Association Privacy & Discovery Seminar, Minneapolis, MN, June 2016
  • IT Concepts for the Health Care Lawyer
    Minnesota CLE, Minneapolis, MN, June 2016
  • The Evolving Cyber Threat Landscape and its Impact on Insurers
    Panelist, J.P. Morgan Investor Services Insurance & Funds Management Forum, New York, NY, May 2016
  • Breach Detection and Cyber Forensics Can't Be an Afterthought
    Co-presenter, HITRUST 2016 Conference, Dallas/Fort Worth, TX, April 2016
  • HACKED: Implications for Privacy and Bioethics in an Era of Big Data
    Co-presenter, Yale University Health Care Conference, New Haven, CT, April 2016
  • Save Time, Save Data: Pre-Breach Preparation Tips for Health Care Companies
    Raptor Blog at strozfriedberg.com, April 2016
  • Where Technology Meets Attorney Ethics: Considerations for In-House Counsel
    Minnesota CLE, Minneapolis, MN, March 2016
  • How to Navigate the Complexities
    Co-presenter, Stanford University and California State Bar Cybersecurity Symposium, Palo Alto, CA, March 2016
  • IT For Lawyers; Information Sharing and Collaboration: Keys to Effectively Working With the FBI and DOJ on Data Security
    Co-presenter and moderator, 2016 Midwest Legal Conference on Privacy and Data Security, Minneapolis, MN, January 2016
  • Health Data Breaches and OCR Investigations
    Co-presenter, Privacy & Security Forum, Washington, D.C., October 2015
  • The Big Hack
    ABA Forum on the Entertainment and Sports Industries Annual Meeting: The Year of Thinking Big, Washington, D.C., October 2015
  • Cybersecurity and Breach Response in a Connected World
    IAPP Privacy Security Risk Forum, Las Vegas, NV, October 2015
  • Data Driven Investigations: When 1's and 0's Matter
    Guest lecturer, St. Thomas University Law School, Minneapolis, MN, September 2015
  • The Role General Counsel Play in Cybersecurity
    ALA Conference, Chicago, IL, September 2015
  • New Lawyer Experience: What You Need to Know About Computers, Electronic Evidence and E-Discovery
    Co-presenter, Minnesota CLE, Minneapolis, July 2015
  • To Guard Against Cyber Attack, Test Your Defenses
    The Metropolitan Corporate Counsel (New York City), May 2014
  • Big Data: A Time to Save, A Time to Delete
    CFO Magazine, April 2014
  • The Cloud is Here: Protecting Health Information in the New Age
    Co-author, Health IT Outcomes, December 2013

Leadership & Community

Professional Associations

  • American Law Institute (ALI), Restatement 3rd, Information Privacy Principles – Appointed Adviser
  • International Association of Privacy Professionals (AIPP) – Member, CIPP/US
  • U.S. Attorney’s Forum for Criminal Justice (D. Minn.) – Former Member
  • Hamline University Department of Legal Studies – Former Adjunct Professor; eDiscovery Advisory Committee – Former Member
  • Experian Identity Services Advisory Council – Former Member
  • Minnesota Bar Association –  Computer Law Section Member
  • American Bar Association – Litigation Section Member

Civic Activities

  • PACER Center for Families of Disabled Children – Board Member and former President; National Business Advisory Board Member
  • Harvard Club of Minnesota – Foundation and Schools Committee Member
  • Minnetonka School Board – Past Director


  • BTI Consulting Group — BTI Client Service All-Star, 2022 
  • Cybersecurity Docket — Incident Response 40, 2021-22
  • Cybersecurity Docket — Incident Response 30, 2018-20
  • U.S. State Department Speaker — Selected to tour SE Asia and lecture on cybercrime and ecommerce
  • Business Week — Profiled as one of the nation's top "cyber cops"
  • FTC Outstanding Team Award — for Privacy initiative and first Privacy "Surf"
  • FTC Stephen Nye Award — Young Attorney of the Year
The Faegre Baker Daniels website uses cookies to make your browsing experience as useful as possible. In order to have the full site experience, keep cookies enabled on your web browser. By browsing our site with cookies enabled, you are agreeing to their use. Review Faegre Baker Daniels' cookies information for more details.