Brittany M. Bacon

Brittany advises clients in identifying, evaluating and managing complex global privacy and information security risks and compliance issues.

Brittany assists clients in identifying, evaluating and managing a panoply of global privacy and information security risks and compliance issues.  A significant aspect of her practice is advising large, multi-national companies on catastrophic cybersecurity incidents.

This includes advising clients on data breach notification responsibilities, counseling them on responding to multi-jurisdictional regulatory investigations, and providing strategic advice in the breach context for managing inquiries from Boards of Directors, consumers, media and potential acquiring companies in a deal setting.

Brittany helps companies design and build privacy and data security governance programs, and develop written policies, procedures and standards.  She advises clients on conducting proactive breach preparedness activities, including developing workable incident response plans and legal breach notification procedures, running executive-level tabletops with data breach hypotheticals, and engaging third-party experts (such as forensic investigation firms, credit monitoring services, PR firms and call centers) in advance of an incident.

In relation to her privacy compliance practice, Brittany has extensive experience in advising clients on state, federal and international privacy laws.  She routinely conducts privacy impact assessments and advises companies on managing risk in connection with extensive and innovative data collection and use.

She works with start-ups whose technology is often years ahead of the laws designed to regulate it.  She also regularly negotiates privacy and data security provisions of complex commercial and technology-related contracts and helps companies design robust vendor management programs.