Companies face rigorous scrutiny of their privacy and data security practices from a growing number of federal, state, and foreign regulators with ever-expanding mandates and increasingly aggressive use of investigative and remedial powers.

loader

Overview

Experience

We have represented clients in over 100 governmental inquiries regarding privacy, security, and AI/ML. Representative examples of our work include:

  • Represented a leading technology company in investigations by the FTC, Congress, state attorneys general, local governmental bodies, and foreign data protection authorities regarding a data security incident and defended the company in litigation filed by state and local government authorities. Negotiated resolution or closure of all matters, including a settlement with 51 state attorneys general.
  • Represented an educational technology provider in an FTC investigation regarding the use of AI and biometric technology, data security and data retention practices, and COPPA compliance. Obtained closure of the investigation without enforcement action.
  • Represented a major technology company in an extensive FTC investigation regarding the use of AI/ML for selection and filtering of user-generated content, as well as COPPA issues. Obtained closure of the investigation without enforcement action.
  • Defended the operator of a mobile app store in a lawsuit brought by the FTC in federal district court regarding in-app charges in mobile apps geared toward children. Persuaded the court to deny all requested injunctive relief.
  • Represented one of the world’s largest device manufacturers in an investigation by the FTC and a coalition of 32 state attorneys general regarding privacy and data security issues in software installed on consumer devices. Negotiated settlements resolving all claims of both the FTC and the state attorneys general.
  • Represented an app developer in an FTC investigation into the collection, use, and disclosure of geolocation information, including the de-identification of such information, and application programming interface (API)-sharing practices. Obtained closure of the investigation without enforcement action.
  • Represented interactive technology provider in FTC investigation regarding COPPA and data security issues for a connected device that leveraged AI/ML and was marketed to children. Persuaded the agency not to require any response to its civil investigative demand (CID) following presentations to the agency and obtained closure of the investigation without enforcement action.
  • Represented a leading technology company following a high-profile privacy issue in an FTC investigation regarding whether user information had been shared with third parties or made public outside the scope of the original notice and consent. Resolved the FTC’s allegations through a groundbreaking consent order that was the first to require a comprehensive privacy program and also the first FTC settlement of allegations of substantive violations of a cross-border transfer arrangement.
  • Represented numerous companies in responding to inquiries from the California attorney general’s office under the California Consumer Privacy Act (CCPA).