Site Search
Professionals 185 results
Capabilities 70 results
Practice Area
Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area.
Practice Area
Employee Benefits & Executive Compensation
With attorneys based in Chicago, New York and Washington, D.C., Winston’s Employee Benefits & Executive Compensation (EBEC) team represents a broad range of plan sponsors and offers clients not just deal support but the full suite of employee benefit services. These include public company reporting and executive compensation, employee benefits in mergers and acquisitions, qualified retirement plans and Title I investment advice, health and welfare benefit plans, employee stock ownership plans (ESOPs), and international human resources matters. And driven by a volatile labor market, we are partnering with clients to innovate plan structure and design, including cutting-edge services such as private exchange medical benefits, employee benefits in captive insurance, and fiduciary governance best practices. With decades of experience, our EBEC team maintains strong brand recognition, with clients describing our attorneys as “superb,” “very client-friendly,” “extremely responsive and able to bring forth the right resources,” and “having an “incredible breadth of knowledge.”
Practice Area
Privacy: Regulated Personal Information (RPI)
Winston’s Regulated Personal Information (RPI) Practice offers seamlessly integrated counseling and litigation services to companies looking for practical and solution-oriented assistance navigating the compliance, regulatory, and private class action enforcement risks presented by the emerging patchwork of complex (and often conflicting) privacy laws in the United States and beyond.
Experience 34 results
Experience
|February 6, 2026
Winston Represented ETi Gida in Acquisition of TRUBAR
A Winston deal team, led by Tim Kincaid, Brad Vaiana and Ben Popeck, represented Turkish snack company ETI Gida Sanayi ve Ticaret Anonim Sirketi (ETi Gida) in its acquisition of Miami-based TRUBAR, a popular nutrition bar known for dessert-inspired flavor and clean ingredients.
Experience
|January 6, 2026
Brightwood Capital’s Acquisition of Museum of Illusions Group
A team led by Bradley Vaiana and Austin Leach represented Brightwood Capital Advisors, LLC (“Brightwood”), a New York–based investment firm, in its acquisition of Museum of Illusions Group, the world’s largest privately held chain of museums, from Invera Capital Partners. As part of the transaction, five previously franchised locations will transition from the chain’s largest franchisee, LOL Entertainment, to become corporate-owned sites. Winston attorneys across multiple practice areas and offices, including M&A, Tax, Intellectual Property, Employee Benefits, and the firm’s UK office, assisted in structuring a complex cross-border transaction to support Brightwood's fund investment goals. The acquisitions were completed on January 6, 2026.
Experience
|November 7, 2025
Precision Aviation Group - Acquisition of Helicopter Engine Repair Overhaul Services
A team led by Austin Leach and Justin Levy represented Precision Aviation Group (PAG) in its acquisition of H.E.R.O.S., a premier Rolls-Royce M250/RR300 engine MRO provider, and its affiliate, Hye-Tech Manufacturing.
Insights & News 2,609 results
In the Media
|March 6, 2026
|1 Min Read
Amelia Garza-Mattia Discusses VPPA Consumer Definition Case with Law360
Winston & Strawn's Amelia Garza-Mattia, senior associate in the firm's Global Privacy & Data Security Practice, was quoted in a Law360 article discussing what to expect in oral arguments for the Salazar v. Paramount Global U.S. Supreme Court case. The case asks the justices to consider what criteria consumers need to meet in order to sue under the federal Video Privacy Protection Act (VPPA), a law enacted in 1988 that prohibits the unauthorized disclosure of certain personal information belonging to “consumers” that rent, purchase, or subscribe to “goods and services from a video tape service provider,” and whether that statute applies to a consumer who doesn’t directly subscribe to audiovisual goods or services.
Investigations, Enforcement, & Compliance Alerts
|March 3, 2026
|5 Min Read
SEC Division of Enforcement Releases Revised Enforcement Manual
Marking the first comprehensive update in eight years, the SEC’s Division of Enforcement (the Division) released a revised edition of its Enforcement Manual (the 2026 Manual). SEC Chairman Paul Atkins called the update a “long-overdue step,” and Division Director Margaret Ryan said the changes are intended to “ensure greater uniformity” and “reflect the Division’s best practices.” Although the 2026 Manual has many changes from the previous version, some will have a greater impact. In this article, we highlight the most significant revisions and discuss their practical implications.
Recognitions
|March 2, 2026
|Less Than 1 Min Read
Alessandra Swanson Named to Crain’s Chicago Business’ 2026 List of Notable Women in Law
Alessandra Swanson—co-chair of Winston & Strawn’s Global Privacy and Data Security Practice and IP/Privacy Practice—has been recognized on Crain’s Chicago Business’ 2026 Notable Women in Law list. This award celebrates outstanding lawyers whose work reflects the breadth of influence shaping business, government, and civic life.
Other Results 73 results
Law Glossary
What Is Privacy Compliance Law?
The area of privacy compliance law addresses how organizations meet legal and regulatory requirements for collecting, processing, or maintaining personal information. Data privacy breaches can lead to regulatory investigations and fines. When privacy is compromised, consumers or employees may respond with civil lawsuits. It is recommended, but not required by a federal law, that companies create and post privacy policies on websites and mobile apps. Once posted, companies must follow these policies or face scrutiny by the Federal Trade Commission. (California and Delaware state law does require privacy policies to be posted on websites and mobile applications, if the site collects personally identifiable information).
Law Glossary
What Is Workplace Privacy Law?
Workplace privacy law involves the legal questions that arise as employers monitor their employees’ activities. Companies may monitor through visual surveillance, such as cameras, and electronic surveillance, and email audits. Businesses monitor to protect confidential information and to help prevent behavioral violations. Employers have broad rights to copy and monitor email sent over company electronic systems and to view these emails as business property. Emails can be monitored based on a number of business principles, including to encourage productivity and discourage illegal activity. Regarding surveillance, employees are allowed reasonable expectations of privacy in areas such as bathrooms. Legal issues may arise when hidden cameras are placed in work areas where employees are not aware of the surveillance.