Site Search
Professionals 96 results
Capabilities 59 results
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Practice Area
Privacy: Regulated Personal Information (RPI)
Winston’s Regulated Personal Information (RPI) Practice offers seamlessly integrated counseling and litigation services to companies looking for practical and solution-oriented assistance navigating the compliance, regulatory, and private class action enforcement risks presented by the emerging patchwork of complex (and often conflicting) privacy laws in the United States and beyond.
Practice Area
Brands across key sectors turn to Winston litigators to defend their reputations in advertising class actions, competitor disputes, and investigations. With litigators based in the U.S.’s busiest jurisdictions—including courts in California, Florida, Illinois, New York, and Texas—we have deep experience and prowess in handling some of the most high-profile and business-essential advertising cases in recent history. These disputes have involved false advertising; unfair competition, unfair business practices, and unjust enrichment; copyright, trade name, and service mark infringement; consumer-protection claims; and violations of the Lanham Act.
Experience 5 results
Experience
|October 1, 2023
Class Action Plaintiff Sent Packing After Winston Secures Enforcement of Binance’s Terms of Use
A Winston team secured a decisive victory for a major cryptocurrency exchange (and provided a potential roadmap for other online businesses seeking to enforce arbitration clauses in their terms of service) this week when a federal judge granted a motion to compel arbitration.
Experience
|November 4, 2022
On November 4, 2022, following a seven-week trial, we secured a full acquittal for Matthew Grimes, who had been accused of acting as an unregistered agent of a foreign government in violation of 18 U.S.C. § 951(the Foreign Agent Registration Act (FARA)) and conspiracy to violate the same under 18 U.S.C. § 371. The victory earned our team, and co-defendant’s counsel, Am Law’s November 11, 2022 “Litigator of the Week” honor.
Experience
|August 27, 2021
GenNx360's Majority Investment in Whitsons Culinary Group
Winston & Strawn LLP represented GenNx360 Capital Partners, a New York City-based private equity firm investing in middle market business-to-business industrial and business services companies, in its majority investment in Whitsons Culinary Group, which leads the industry with its customized services, innovative programs, commitment to quality, focus on nutrition, local sourcing, and community support. Its services include school nutrition, residential and healthcare dining, prepared meals, and emergency dining. GenNx360’s operational expertise and track record of building platforms will continue to drive Whitson’s next phase of rapid growth. GenNx360's investment will enable Whitsons to focus on driving their mission of Enhancing Life One Meal at a Time™.
Insights & News 1,611 results
Investigations, Enforcement, & Compliance Alerts
|February 18, 2026
|3 Min Read
Beyond the CMMC: New Cybersecurity Assessments for Government Contractors
The General Services Administration (GSA) recently announced changes to procedural guidance that may affect contractor eligibility for GSA contracts. GSA issued the IT Security Procedural Guide: Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process CIO-IT Security-21-112, which set out a cybersecurity framework for protecting CUI that is similar to the Cybersecurity Maturity Model Certification (CMMC) for DoD contracts.
Press Release
|February 11, 2026
|1 Min Read
Winston & Strawn Expands Funds Practice with Addition of Partner Patrick Valenti in Chicago
Chicago – February 11, 2026 – Winston & Strawn LLP announced today that Patrick Valenti has joined the firm’s Chicago office as a partner in the Transactions Department and a member of the Private Investment Funds Practice.
Press Release
|February 9, 2026
|1 Min Read
Winston & Strawn Paris Expands into New Offices to Support Continued Growth
PARIS—February 9, 2026—Today, Winston & Strawn’s Paris office took an important step in its ongoing development, as the office celebrates its 30th anniversary: It has relocated to new offices at 106 Boulevard Haussmann.
Other Results 63 results
Law Glossary
What Is Workplace Privacy Law?
Workplace privacy law involves the legal questions that arise as employers monitor their employees’ activities. Companies may monitor through visual surveillance, such as cameras, and electronic surveillance, and email audits. Businesses monitor to protect confidential information and to help prevent behavioral violations. Employers have broad rights to copy and monitor email sent over company electronic systems and to view these emails as business property. Emails can be monitored based on a number of business principles, including to encourage productivity and discourage illegal activity. Regarding surveillance, employees are allowed reasonable expectations of privacy in areas such as bathrooms. Legal issues may arise when hidden cameras are placed in work areas where employees are not aware of the surveillance.
Law Glossary
What Is Privacy Compliance Law?
The area of privacy compliance law addresses how organizations meet legal and regulatory requirements for collecting, processing, or maintaining personal information. Data privacy breaches can lead to regulatory investigations and fines. When privacy is compromised, consumers or employees may respond with civil lawsuits. It is recommended, but not required by a federal law, that companies create and post privacy policies on websites and mobile apps. Once posted, companies must follow these policies or face scrutiny by the Federal Trade Commission. (California and Delaware state law does require privacy policies to be posted on websites and mobile applications, if the site collects personally identifiable information).