Technology & Data Privacy.

Code ships fast; regulation does not. We help technology companies close that gap — privacy programs that survive audits and contracts that survive scale — with our intellectual property colleagues on the other side of the hallway.

400+Privacy assessments and data-mapping engagements completed
72hTarget window from breach call to notification decision
98%Of regulatory inquiries closed without penalty

Overview

A data practice is defensible only when it is documented. We map what you collect, cut what you do not need, and draft the disclosures and contracts that make everything else hold up under scrutiny.

GDPR, CCPA/CPRA, and the growing state patchwork; incident response and breach notification; SaaS and licensing; AI governance. We embed with product teams so legal review arrives before the release — not after the subpoena.

Data flows are global by default, so our Chicago team works daily with our London headquarters and associated counsel in Singapore to keep a transfer mechanism valid in Illinois valid in the EU and APAC as well — under one instruction.

A consultant at the laptop where the compliance work actually happens

Get in touch

The Technology & Data Privacy team

GT

Grace Tran

Senior Partner · Lead, Technology & Privacy
RP

Ravi Park

Partner · Data Protection
SY

S. Yates

Counsel · Incident Response
IN

Ingrid Nyström

Associate · AI & Platform Regulation
See all people

What the record says

Our GDPR audit went from terrifying to scheduled. Nothing broke the roadmap.
SaaS client survey, 2025
A breach at nine in the evening, a decision by breakfast, and regulators who thanked us for the notice.
Fintech client survey, 2025

Recent work

Matters we're proud of

Privacy

CPRA program and vendor stack overhauled for a consumer platform with 2M users

Incident

Ransomware event contained and notified across eleven states in ten days

AI governance

Model-use policy and risk register adopted across an enterprise software group

Contracts

Global data-processing terms negotiated for a fintech entering EU markets

Latest articles and knowledge

Article

The state privacy patchwork in 2026: what actually changed

Legal briefing

Selling data lawfully: contracts, consent, and common traps

Article

Your AI vendor's terms are quietly eating your compliance program

Ship fast, stay lawful

A confidential first conversation with the technology and privacy team.

Get started