Site Search
Professionals 180 results
Capabilities 64 results
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Practice Area
eDiscovery & Information Governance
Winston’s eDiscovery & Information Governance Practice (eDiscovery Group) is one of the United States’ largest and most experienced. Per The Legal 500 US 2024, “[Winston has] a very strong practice from top to bottom. They have a good e-discovery consulting practice and excellent review and production capabilities and are amongst the strongest advocates you could want in a courtroom.” We have built a full-service consulting practice to support our clients and case teams in these complex areas—both domestically and globally.
Experience 27 results
Experience
|December 8, 2023
Winston Represented Interlock Equity in Investment in evolv Consulting
Experience
|October 3, 2023
Insights & News 2,001 results
In the Media
|August 21, 2025
|2 Min Read
Aparna Sehgal Discusses European CRE Recovery with Structured Credit Investor
Winston & Strawn partner Aparna Sehgal spoke with Structured Credit Investor to discuss the findings of the Bayes Business School’s latest European Commercial Real Estate Lending report and the legal issues and trends underpinning them. In addition to valuable data on deal volumes and covenant and pricing terms, the report on European real estate debt markets offers insight into how underlying funding structures and bank participation through the repo/loan-on-loan market are shaping the recovery of different real estate markets at a national and sector level. According to the report, U.K. property values and deal activity have rebounded faster, while European markets remain challenged by a mix of stalled development sales, rising capital costs, and stricter environmental upgrade requirements hold back volumes.
Investigations, Enforcement, & Compliance Alerts
|August 18, 2025
|2 Min Read
PE Fund on Hook for Portco’s False Claims Act Cybersecurity Violations
DOJ False Claims Act (FCA) settlements related to cybersecurity typically have focused on false representations by a government contractor of its compliance with cybersecurity requirements. A recently announced settlement shows that private equity owners are not immune from potential FCA liability.
Client Alert
|August 11, 2025
|9 Min Read
Debanking—closing accounts or refusing to open accounts for customers perceived to be high risk—has become a hotly debated topic in recent years among groups on both sides of the political aisle. The debate involves allegations that banks have improperly debanked customers for political, rather than risk-based, reasons. Such accusations have shined a spotlight on banks’ account management practices, resulting in changes to regulatory practices and a new executive order from President Trump requiring additional regulatory changes and investigations. All of which will mean increased risk for financial institutions.
Other Results 74 results
Site Content
Law Glossary
What Is Data Breach and Data Security Law?
Within 48 U.S. states and the District of Columbia, data breach and data security laws require organizations and government agencies to provide notifications of security breaches when they involve personally identifiable information. Companies may also be required by state data breach laws to act to minimize the effects of a breach. The FTC can investigate companies that do not adhere to their stated privacy policies and do not have safeguards to protect customer data, but no broad federal law exists regarding breach notifications. However, these U.S. data security laws and government agency rules are enforced:
Site Content
Definitions of big data may differ within the computing or business world. In general, the term refers to structured and unstructured data that is extremely large in volume and/or complex—and due to these characteristics, it is difficult to manage with standard data processing or storage. The phrase “big data” may also refer to the processing techniques that an organization employs to manage the huge, complex, or time-sensitive sets of information it receives.