Site Search
Professionals 122 results
Capabilities 61 results
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Practice Area
Privacy: Regulated Personal Information (RPI)
Winston’s Regulated Personal Information (RPI) Practice offers seamlessly integrated counseling and litigation services to companies looking for practical and solution-oriented assistance navigating the compliance, regulatory, and private class action enforcement risks presented by the emerging patchwork of complex (and often conflicting) privacy laws in the United States and beyond.
Practice Area
Winston has decades of experience representing clients in international arbitrations around the world. Representing clients in both commercial and investor-state international arbitrations, we are well known by the leading players in the global arbitration arena. Our integrated team of attorneys enforces awards worldwide, knows every angle of international disputes, and has a robust understanding of our client’s industries.
Experience 12 results
Experience
|February 13, 2025
RF Acquisition Corp. Closes Business Combination with GCL Asia to Go Public
Winston & Strawn represented RF Acquisition Corp., a publicly traded special purpose acquisition company, in its business combination with Grand Centrex Limited, one of Asia's leading video game distributors and publishers. The combined company, GCL, is now listed on Nasdaq under the reserved ticker symbol "GCL.” The transaction gives GCL approximately $1.2 billion in pre-transaction equity value. GCL's existing shareholders will roll over 100% of the equity and retain a majority of the Combined Company's outstanding shares, while GCL also designated a majority of the Combined Company's board of directors. The transaction includes a minimum cash condition of $25,000,000 and resulted in GCL receiving gross proceeds of approximately $42.9 million (assuming no further redemptions by RF Acquisition shareholders). RF Acquisition and GCL have agreed to work together to pursue commitments for a private placement of equity, debt, or other alternative financings of up to $20 million. GCL expects to use proceeds from the transaction to accelerate its game publishing and IP management business, alongside its marketing reach with AAA/AA PC game titles.
Experience
|July 8, 2024
Winston assists Milexia in Acquiring Cabcongroup
Winston has advised Milexia Group, a European leader in the sale of high-tech components, systems, and scientific instruments, with branches and warehouses in France, Germany, Italy, Spain, and the United Kingdom, in the acquisition of the Danish group Cabcon, which specializes in the distribution of electrical components. With this strategic acquisition, Milexia continues to expand its presence and service offerings in Europe and Asia, further reinforcing its commitment to providing high-quality, reliable, and efficient technological products and supply chain solutions across various sectors.
Experience
|April 2, 2024
StoneBridge Acquisition Corporation Closes Business Combination with DigiAsia
Winston & Strawn represented Stonebridge Acquisition Corp. (Nasdaq: APAC), an Asia-Pacific-focused publicly traded special purpose acquisition company, in connection with the closing of its business combination agreement with DigiAsia Bios Pte Ltd., Indonesia’s Embeddable "Fintech-as-a-Service" company. Its ordinary shares and warrants will trade on Nasdaq under the symbols “FAAS” and “FAASW” respectively, starting April 3, 2024.
Insights & News 1,483 results
Recognitions
|April 7, 2026
|Less Than 1 Min Read
Law360 Names Winston Lawyers to 2026 Editorial Advisory Boards
Several Winston & Strawn lawyers have been selected to serve on Law360’s 2026 Editorial Advisory Boards. As board members, they will provide feedback on Law360’s coverage and insights on how to best shape future content. Congratulations to:
In the Media
|March 10, 2026
|1 Min Read
Eva Davis Profiled as a Trailblazer in M&A by Mergermarket
Winston & Strawn partner Eva Davis was featured in a Mergermarket article highlighting notable people across the mergers & acquisitions dealmaking cycle in North America. In the profile, Eva discussed a defining moment in her career in M&A that shaped her leadership style, the turning point when she felt she truly found her voice as a dealmaker, most exciting opportunities in the M&A and private equity environment in 2026, and more.
Speaking Engagement
|March 10, 2026
Bobby Malhotra, chair of Winston’s eDiscovery and Information Governance Practice, moderated a panel at Legalweek exploring how Legal Data Intelligence can empower legal teams to create scalable, transparent, and risk-aware AI governance frameworks that address the evolving challenges of AI in organizations. The discussion focused on practical strategies for legal professionals to streamline policy development, compliance, risk management, and data governance throughout the entire lifecycle of AI systems.
Other Results 63 results
Site Content
Law Glossary
What Is Privacy Compliance Law?
The area of privacy compliance law addresses how organizations meet legal and regulatory requirements for collecting, processing, or maintaining personal information. Data privacy breaches can lead to regulatory investigations and fines. When privacy is compromised, consumers or employees may respond with civil lawsuits. It is recommended, but not required by a federal law, that companies create and post privacy policies on websites and mobile apps. Once posted, companies must follow these policies or face scrutiny by the Federal Trade Commission. (California and Delaware state law does require privacy policies to be posted on websites and mobile applications, if the site collects personally identifiable information).


