Site Search
Professionals 12 results
Capabilities 12 results
Practice Area
Privacy: Regulated Personal Information (RPI)
Winston’s Regulated Personal Information (RPI) Practice offers seamlessly integrated counseling and litigation services to companies looking for practical and solution-oriented assistance navigating the compliance, regulatory, and private class action enforcement risks presented by the emerging patchwork of complex (and often conflicting) privacy laws in the United States and beyond.
Practice Area
For decades, Winston has represented a broad array of clients in the insurance industry, including some of the world’s largest and best-known insurers. Our prowess in and understanding of the insurance industry encompasses not only its products, practices, and services, but also the increasing challenges posed by a world increasingly characterized by a fast-evolving technological landscape as well as financial, political, and environmental instability. Accordingly, Winston’s lawyers are among the most sought-after in the industry—not only by companies currently facing high-stakes litigations and investigations, but by those looking to take preventive action now in order to mitigate and manage their risk in the future.
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Experience 1 result
Experience
|October 1, 2023
Class Action Plaintiff Sent Packing After Winston Secures Enforcement of Binance’s Terms of Use
A Winston team secured a decisive victory for a major cryptocurrency exchange (and provided a potential roadmap for other online businesses seeking to enforce arbitration clauses in their terms of service) this week when a federal judge granted a motion to compel arbitration.
Insights & News 80 results
Competition Corner
|December 23, 2025
|4 Min Read
New York recently expanded its algorithmic pricing laws, now requiring retailers to disclose when prices are set with algorithmic software based on consumers’ personal data.The so-called practice of surveillance pricing entails adjusting prices charged for goods and services according to monitored personal data.
Winston’s AI Top 10
|September 2025
|5 Min Read
Winston’s AI Monthly Recap - September 2025
Winston’s AI Top 10 summarizes the latest AI developments in the legal industry.
In the Media
|March 12, 2025
|2 Min Read
Sean Wieber Discusses Growth of Privacy Class Actions Involving Biometrics and Genetics with Law.com
Winston & Strawn Global Privacy & Data Security Practice Co-Chair Sean Wieber was quoted in a Law.com article discussing the growth of privacy class action lawsuits against employers involving biometrics and genetics. In recent years, privacy disputes have emerged under Illinois’ Biometric Information Privacy Act (BIPA) as employees challenged how employers stored data, such as fingerprints used to clock in and out of work. Favorable rulings for plaintiffs in these cases exposed corporations to a potential risk for high costs for each violation, but legislative changes put a limit on the payout potential. Now, lawsuits are emerging under the Illinois Genetic Information Privacy Act (GIPA), which has statutory damages three times higher than BIPA, against employers who allegedly required employees or job seekers to provide “genetic information,” or family medical background, as a condition of employment.
Other Results 13 results
Site Content
The Illinois Biometric Invasion of Privacy Act (BIPA), enacted in 2008, grants Illinois consumers the right to their own biometric data, such as fingerprints, retina or iris information, voiceprints, and DNA. Under the BIPA, private companies are prohibited from collecting biometric information unless (1) the person consents in writing and (2) the companies inform the person in writing of what data is being collected, for what purpose, and for how long. Besides the notice and consent requirement, the law also bans any company from selling or otherwise profiting from consumers’ biometrics.
Site Content
The Illinois Genetic Information Privacy Act (GIPA), enacted in 1998, prohibits employers and their agents from conditioning employment on genetic data, or from using genetic data in discriminatory ways. The statute also prohibits insurers from seeking genetic information to use in connection with accident or health insurance policies.