Privacy & Information Security Law Blog : Privacy Lawyer & Attorney : Hunton & Williams Law Firm : Personal Data, Information Security

In today's digital economy, the manner in which a company manages information is often critical to a successful business model. Information can be a powerful asset or a legal liability.  Hunton & Williams’ Privacy and Information Management practice helps companies manage data at every step of the information lifecycle. Our practice develops enterprise-wide information management programs. Our skills enable clients to comply with privacy and data protection laws while maximizing business flexibility and generating revenue.

Team members understand information-use business models and how information flows generate revenue for our clients. We have underlying subject matter experience in technology, banking & finance, consumer protection, international law, intellectual property, health care, regulatory law and litigation. In addition to our legal capabilities, our lawyers have hands-on business experience that enables us to provide strategic business consulting on all aspects of information policy, including privacy, information security and records management. 

Our Clients
We represent a diverse group of clients, including consumer goods companies, electronic publishers, reference services, consumer and business credit reporting agencies, risk management specialists, health care providers, direct marketers, telecommunications and Internet service providers, banks, insurance providers and government agencies.

The common link among our clients is information - our clients grow and enhance their businesses through the use of information. To achieve maximum return on the investment that each client has in its global information assets, we provide clients with an understanding of the current legal environment, assistance with development of an appropriate values-based corporate information policy, and guidance on implementing and communicating those values. We craft timely, cost efficient solutions that balance each company's internal and external needs. Our goal is to provide high quality, total solution services with an entrepreneurial spirit to all our information management clients.

Areas of Experience
Hunton & Williams' Privacy and Information Management practice focuses on providing legal services in the following areas:

• Compliance with all U.S. federal and state privacy and information management laws, including the Gramm-Leach-Bliley Act, HIPAA, the Children's Online Privacy Protection Act, the Fair Credit Reporting Act and Fair and Accurate Credit Transactions Act of 2003, the Driver's Privacy Protection Act, the CAN-SPAM Act, the TCPA, state security breach notification laws, state Social Security laws, and other federal and state statutes and regulations;
• Compliance with all international data protection laws, including the EU Data Protection, e-Privacy and Data Retention Directives and implementing laws and regulations (including the U.S. Safe Harbor program, Model Contracts, and Binding Corporate Rules), and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA); 
• Comprehensive assistance with significant information security breaches, including network intrusion investigations, customer notification, state and federal regulatory negotiations, discussions with credit card issuers, and public relations, call center and investor relations communications and training;
• Performance of comprehensive privacy and information management assessments, including preparation of data flow maps and privacy policies and procedures;
• Development and implementation of privacy and data use policies and procedures that comply with applicable laws and generate consumer and business partner confidence, revenue and flexibility;
• Development and implementation of programs to protect global information assets, including legislative and regulatory advocacy;
• Assistance with information product life cycle issues, including product promotion, customer profiling, targeted marketing, channel definition and expansion, franchising, branding, advertising, warranties, and pricing;
• Drafting and negotiation of vendor contracts and information use and distribution agreements; and
• Assistance with dispute resolution, management of consumer concerns, response to allegations of misuse of data, state and federal investigations (including actions and requests for information from state attorneys general and the Federal Trade Commission), and litigation.