Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

AI Didn’t Just Change Your Business. It Changed Your Attacker’s, Too.

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

Join Morrison Foerster’s Global Data, Cyber + Privacy Group for our cybersecurity month masterclass webinar, “The Upgrade Nobody...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

Join Morrison Foerster’s Global Data, Cyber + Privacy Group for our cybersecurity month masterclass webinar, “The Upgrade Nobody Wanted: Legal and Security Strategies for AI-Enabled Cyberattacks.” In this webinar, Morrison Foerster partners Kaylee Bankston, Linda Clark, and Alex van der Wolk will be joined by former Assistant Director of the FBI’s Cyber Division Bryan Vorndran to examine the rapidly evolving landscape of AI-enabled cyberattacks, from the current threat trends driving a sharp rise in AI-assisted breaches that are faster, harder to detect, and more destructive to the legal, regulatory, and governance issues these attacks create for organizations globally. In-house counsel, CISOs, and other security and risk leaders will benefit from practical insights into current attack trends, key issues to keep in mind when assessing and responding to this evolving risk, and concrete strategies for strengthening governance, vendor management, and incident response in the face of AI-enabled threats.<hr>

AI Didn’t Just Change Your Business. It Changed Your Attacker’s, Too.

Sign Up

Kaylee Cox Bankston is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. She advises clients across all industries on complex cybersecurity, privacy, and data matters, including cybersecurity investigations and breach preparation, corporate governance and risk management, regulatory investigations, litigation and class action defense, and other emerging industry issues, such as the use and impacts of artificial intelligence (AI). Kaylee was recognized by The Legal 500 US for her work in cyber law (including data privacy and data protection) in 2023 and 2025. Kaylee is also a co-author of The International Handbook of AI Law: A Guide to Understanding and Resolving the Legal Challenges of Artificial Intelligence.<ul><li>Cybersecurity Investigations and Incident Response Preparedness: Kaylee has extensive experience leading clients in investigations of sophisticated cyberattacks and security breaches conducted by high-profile threat actor groups, including ransomware, data extortion events, and business email compromises. She also counsels clients on incident response programs and preparedness, including developing and conducting cybersecurity simulations and tabletop exercises, preparing clients for security assessments, audits, and testing, and advising on post-assessment implementation and risk mitigation strategies. Kaylee advises clients on cybersecurity information and intelligence sharing, data access requests, and related national security matters.</li><li>Regulatory Investigations and Litigation: Kaylee has substantial experience representing clients in privacy and security investigations and related regulatory actions. She has represented companies in cybersecurity and privacy matters before U.S. and international regulators, including the U.S. Federal Trade Commission (FTC), the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services, Office of Civil Rights (HHS OCR), New York Department of Financial Services (NYDFS), and state attorneys general, and in litigation matters in various U.S. federal and state courts.</li><li>Compliance, Corporate Governance, and Public Companies Counseling: Kaylee has counseled numerous companies on how to navigate and comply with the new DOJ “Bulk Data” regulations, implementing Executive Order 14117. She has advised clients on the recent SEC Cybersecurity Disclosure Rules, including counseling on disclosure obligations for material cybersecurity incidents and developing annual SEC cybersecurity disclosures for publicly traded companies. Kaylee also counsels executives and boards of directors on cybersecurity and privacy corporate governance and risk management matters and regularly advises clients on the development of cybersecurity and privacy programs and compliance with other regulatory requirements and standards, such as the NYDFS Part 500 cybersecurity requirements, the FTC Safeguards Rule, the FTC Act, the California Consumer Privacy Act (CCPA) and state data privacy laws, the Illinois Biometric Information Privacy Act (BIPA), the Children’s Online Privacy Protection Act (COPPA), the Health Insurance Portability and Accountability Act (HIPAA), the Family Educational Rights and Privacy Act (FERPA), the Gramm-Leach-Bliley Act (GLBA), and the Payment Card Industry Data Security Standard (PCI DSS).</li><li>Corporate Transactions and Vendor Management: Kaylee counsels clients on vendor management programs, including developing security and privacy contracting frameworks and negotiating data protection agreements. Kaylee also advises clients on privacy and security diligence matters in connection with corporate transactions.</li></ul>Kaylee is an adjunct professor at Georgetown University Law Center, where she teaches a cybersecurity course. Kaylee is a Certified Information Privacy Professional (CIPP) through the International Association of Privacy Professionals. She previously served on the Center for a New American Security, Technology Policy Lab Working Group for Data Privacy and the Bar Association of the District of Columbia Board of Directors and National Security Steering Committee. She is also a member of Women in CyberSecurity (WiCyS).

Kaylee Bankston

Partner

Linda Clark is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. Prior to joining MoFo, Linda served as the Chief Data Security Counsel for RELX, where she led the data security legal compliance efforts for RELX in over 40 countries. Before that, Linda was a litigator at a large New York law firm. She has over 20 years’ experience advising clients on data security best practices and obligations, designing and implementing frameworks for compliance across large multinational organizations, and responding to complex cybersecurity breaches.A skilled data, cyber, and privacy lawyer, Linda’s practice centers on providing business-focused and practical advice to clients. She leverages her knowledge and deep experience to help organizations and their stakeholders craft strategic and comprehensive data security risk management programs and prepare for and respond to global cyber incidents. She frequently works with clients to proactively prepare them for cyber incidents, including developing incident response programs and risk assessment methodologies and conducting tabletop exercises for global audiences. Her comprehensive approach helps organizations support critical decision-making in high-stakes situations, enabling her clients to implement and leverage incident response frameworks that support legal compliance and ethical decision-making.A defining aspect of Linda’s counsel is her ability to translate complex legal and business issues into actionable strategies while accounting for myriad and diverse stakeholder concerns at all levels. She combines an in-depth understanding of technology and cybersecurity with knowledge of the challenges and opportunities clients face when addressing real-world issues. She has a broad command of global privacy and data security laws, having worked on matters in the United Kingdom, the United States, Canada, France, Japan, Thailand, the Netherlands, South Africa, Australia, China, Austria, Brazil, the Philippines, and Germany. She frequently engages with regulators and law enforcement, and this has enabled her to understand and navigate regulatory inquiries, third-party audits, and investigations on behalf of her global clients.Linda frequently speaks at conferences and is sought out by leading publications for her analysis on cutting-edge data security and privacy issues including the impact of AI on cybersecurity. She also provides presentations at schools and universities to educate younger generations about safeguarding their digital identities. Additionally, Linda works with leading U.S. nonpartisan, nonprofit law and policy think tank, the Sedona Conference, where she has served on the Data Security and Privacy Liability Leadership Council since 2017.Linda graduated cum laude from Barnard College, Columbia University, and is a graduate of the University of Michigan Law School. While at Barnard, she was a research assistant in the human learning and memory lab and focused her studies on human and primate cognition. She is also a Certified Information Privacy Professional (CIPP/US) and a Steering Committee member of the New York City Bar’s Cyrus R. Vance Center for International Justice, Miami chapter of Women in the Profession. In 2025, Linda was elected to Law360’s Cybersecurity & Privacy Editorial Board. In 2026, Linda was named as one of Cybersecurity Docket’s Incident Response Elite. She previously served on the Steering Committee for the Cybersecurity Leaders’ Roundtable as well as on the Executive Committee of the Leukemia and Lymphoma Society.

Linda Clark

Alex van der Wolk is the managing partner of Morrison Foerster’s Amsterdam office and chair of the firm’s European Data, Cyber + Privacy practice. Drawing on 20 years of experience, he advises global companies on their most complex data strategies and compliance programs, governing all aspects of information management.Clients value Alex’s practical approach, commercial understanding, and global perspective. Chambers EU notes that he “quickly gets to the heart of the issue and provides solid, pragmatic advice,” offers “great insight in global matters,” and delivers “practical guidance on complex problems.”Alex helps clients develop data and privacy strategies at the forefront of their digital and data-driven endeavors, especially those involving new technologies. He has significant experience assisting clients with structuring their approach to data in specialized areas, such as health-tech, AgTech, and AdTech.He regularly leads crisis management teams for clients facing investigations by data protection authorities or responding to cybersecurity incidents. He also advises on cyber preparedness and EU regulatory frameworks, including NIS2, DORA, the Cyber Resilience Act, and the EU Data Act.Alex is an experienced litigator, representing clients in privacy litigation across Europe. His work includes successfully representing clients in the first privacy class action cases in the Netherlands and the UK.Notably, Alex was one of the first practitioners in Europe to help companies establish Binding Corporate Rules (BCRs). Since then, he has developed a longstanding and unparalleled track record obtaining regulatory approval for BCRs, both in the EU and in the UK.Alex frequently speaks at high-profile international conferences, including IAPP and South by Southwest (SXSW). He is also a guest lecturer at the TIAS Business School of Tilburg University.Alex is a Dutch-qualified lawyer and a member of the Amsterdam and Brussels Bars. He speaks English and Dutch fluently.

AI Didn’t Just Change Your Business. It Changed Your Attacker’s, Too.

27 Oct 2026 11:00 AM - 12:00 PM EDT