International

Our International practice, based in London, furthers at a global scale the Firm’s overall Advisory Compliance, Incident Response, Litigation, and Regulatory Investigation capabilities. We offer comprehensive international data privacy and security legal services for organizations across the globe, as well as for U.S.-domiciled organizations with international or global operations, to ensure that they are equipped with the most effective compliance, risk management, and incident response strategies. Whether faced with a data privacy and security incident, building a global compliance program, or responding to third-party allegations or government and regulatory scrutiny, we are equipped to counsel organizations with strategies and solutions that minimize the operational, financial, and reputational effects stemming from data privacy and protection across the world.

Our multinational team of both U.S.- and cross-border lawyers provides 24/7/365 crisis management and incident response services, and counsel organizations with the strategic guidance necessary to navigate the complex, quick-moving, and ever-evolving global data privacy and security legal and regulatory landscape across multiple jurisdictions. Our experience includes counseling organizations in and from Canada, Central and South America, the United Kingdom (UK), the European Union (EU), the Middle East, and the Asia-Pacific (APAC) region.

Incident Response
We are built on a genuinely integrated transatlantic partnership between our U.S. and international teams, combined with a carefully curated international network of trusted local counsel. Together, this creates a single, coordinated, and global offering designed to meet the realities of modern data privacy and security incidents and the inherently multi-jurisdictional needs of today’s global and interconnected business world. Crucially, these deliberately structured and operationally aligned partnerships function as one unit, enabling us to manage legal risks and regulatory requirements seamlessly across borders, while ensuring efficiency, consistency, and strategic oversight.

Our 24/7/365 support in responding to data privacy and security incidents includes, oftentimes with local counsel when/if applicable, coordinating a digital forensic investigation, engaging with law enforcement, and managing cross-border legal obligations. Our team ensures timely notification to international regulators and affected individuals, businesses, and other third-parties in accordance with applicable laws.

In the course of an incident response and investigation, we regularly interact with various national-level law enforcement and cybercrime units such as the FBI’s Cybercrime Division, Europol’s European Cybercrime Centre (EC3), and INTERPOL, as well as local law enforcement, to support our investigations and to preserve data and investigation integrity.

Advisory Compliance
Our International team understands prevailing and future data privacy and security laws, regulations, and trends from various international jurisdictions. We counsel organizations with understanding and complying with applicable laws and regulations, as well as the cyber risks pertinent to their operations so that they can be proactive in mitigating the operational, financial, and reputational effects of a data privacy and security incident.

In addition to our full complement of Advisory Compliance services and solutions, we advise multinational organizations on the design, implementation, and audit of global privacy and security compliance programs, ensuring alignment with applicable international data privacy and security laws and legal and industry standards such as General Data Protection Regulation (GDPR) compliance, ISO/IEC 27001 and 27701, the NIST Cybersecurity Framework, and the Payment Card Industry Security Standards Council (PCI-SSC). Additionally, we assist organizations with drafting of Data Processing Agreements (DPAs) and conducting Data Protection Impact Assessments (DPIAs), in addition to other required compliance documentation, in relation to the GDPR.

Regulatory Investigation & Defense
Our International team has deep experience managing hundreds of complex, high-stakes regulatory investigations before a broad range of authorities around the globe. We assist organizations in responding to regulatory investigation and follow-up inquiries after a data privacy and security incident; preparing for audits; and negotiating enforcement outcomes, including penalties, consent decrees, and mandated corrective actions.

Litigation
Our International team advises and defends global organizations in complex, cross-border litigation arising from privacy and data security-related disputes. Our experience encompasses navigating the procedural and substantive complexities of handling litigation within and across multiple jurisdictions. We defend and provide strategic advice to organizations engaged in pre-litigation disputes, as well as single-plaintiff and class action disputes and claims related to data privacy and security incidents; alleged violations of non-compliance with international privacy and security laws and regulations; emerging technologies, such as such as website tracking (e.g., Meta Pixel), session/chat replay, and artificial intelligence; biometrics; and contracts. Members of our International team are also amongst the few who are well-versed in litigating against both regulatory and data protection authorities following the imposition of fines or enforcement action under data protection legislation.

We understand the unique challenges of litigating across borders, including with the various standards for data protection, e-discovery, and attorney-client privilege. If applicable or necessary, we also have long-standing and trusting relationships with local counsel in numerous jurisdictions who are able to leverage our technical and legal fluency to craft coordinated strategies to minimize liability and risks in an effective and efficient manner.