Site Search
Professionals 268 results
Capabilities 69 results
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Practice Area
eDiscovery & Information Governance
Winston’s eDiscovery & Information Governance Practice (eDiscovery Group) is one of the United States’ largest and most experienced. Per The Legal 500 US 2024, “[Winston has] a very strong practice from top to bottom. They have a good e-discovery consulting practice and excellent review and production capabilities and are amongst the strongest advocates you could want in a courtroom.” We have built a full-service consulting practice to support our clients and case teams in these complex areas—both domestically and globally.
Experience 48 results
Experience
|April 29, 2025
Stream Realty Completes Ownership Transfer of Houston Center
Insights & News 2,372 results
Pro Bono In Action
|August 26, 2025
|1 Min Read
Winston Scores Title IX Win for High School Softball Players
Winston lawyers won class certification and then negotiated a favorable settlement for female College Park High School athletes who alleged gender discrimination in the school’s softball program.
In the Media
|August 21, 2025
|2 Min Read
Aparna Sehgal Discusses European CRE Recovery with Structured Credit Investor
Winston & Strawn partner Aparna Sehgal spoke with Structured Credit Investor to discuss the findings of the Bayes Business School’s latest European Commercial Real Estate Lending report and the legal issues and trends underpinning them. In addition to valuable data on deal volumes and covenant and pricing terms, the report on European real estate debt markets offers insight into how underlying funding structures and bank participation through the repo/loan-on-loan market are shaping the recovery of different real estate markets at a national and sector level. According to the report, U.K. property values and deal activity have rebounded faster, while European markets remain challenged by a mix of stalled development sales, rising capital costs, and stricter environmental upgrade requirements hold back volumes.
Investigations, Enforcement, & Compliance Alerts
|August 18, 2025
|2 Min Read
PE Fund on Hook for Portco’s False Claims Act Cybersecurity Violations
DOJ False Claims Act (FCA) settlements related to cybersecurity typically have focused on false representations by a government contractor of its compliance with cybersecurity requirements. A recently announced settlement shows that private equity owners are not immune from potential FCA liability.
Other Results 75 results
Law Glossary
What Is Data Breach and Data Security Law?
Within 48 U.S. states and the District of Columbia, data breach and data security laws require organizations and government agencies to provide notifications of security breaches when they involve personally identifiable information. Companies may also be required by state data breach laws to act to minimize the effects of a breach. The FTC can investigate companies that do not adhere to their stated privacy policies and do not have safeguards to protect customer data, but no broad federal law exists regarding breach notifications. However, these U.S. data security laws and government agency rules are enforced:
Site Content
Definitions of big data may differ within the computing or business world. In general, the term refers to structured and unstructured data that is extremely large in volume and/or complex—and due to these characteristics, it is difficult to manage with standard data processing or storage. The phrase “big data” may also refer to the processing techniques that an organization employs to manage the huge, complex, or time-sensitive sets of information it receives.
Law Glossary
Though the U.S. has not passed legislation dealing solely with data security law, organizations are expected to safeguard sensitive information and establish privacy policies. Legislation addressing specific types of sensitive data is found within various U.S. laws, such as the Gramm-Leach-Bliley Act.