Personal data is the lifeblood of the modern economy. Technology companies, manufacturers, retailers, advertisers, news outlets, social networks, professional service providers, and employers all rely on personal data and that data increasingly flows among businesses and across borders.

Governments and industry association have reacted with a thicket of overlapping, rapidly changing laws, regulations, and policies. Laws such as California’s Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR) mean that the data handling practices of almost all US businesses are subject to direct regulation. Companies in special sectors such as financial services, health care, telecommunications, and government services have additional data privacy and security compliance obligations. Regulators seize on “hot topics” such as consumer tracking, online behavioral advertising, and protection of children with surprising speed, and the Federal Trade Commission and state regulators are increasingly willing to impose liability for “unfair and deceptive business practices”, anti-competitive conduct, and failure to protect vulnerable populations, including children and senior citizens. Almost all fifty states have enacted data breach and similar statutes. The new business reality is that almost every company must address data privacy and security compliance and manage associated risks in its contracts and internal controls.

CM Law PLLC data privacy and security attorneys understand the compliance challenges facing today’s businesses. Combined, these attorneys have over 100 years of experience, all have at least 10 years of technology and/or compliance experience, and many are qualified as Certified Information Privacy Professionals (US and EU) through the International Association of Privacy Professionals (IAPP). Our attorneys have devised compliance plans for clients operating in a wide range of sectors and of all sizes, including those in the Fortune 1000. Adding to this body of knowledge are CM Law subject matter experts in Technology, Regulatory, International, Employment and Insurance. Our attorneys work with a client as one organization to identify business units requiring attention to data privacy and security, and from that foundation collaborate with the client to tailor responsive, business-focused solutions.