Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

Eight MoFo Partners Named Among Lawdragon’s 500 Leading Global Cyber Lawyers

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

Eight Morrison Foerster partners have been named to Lawdragon’s 500 Leading Global Cyber Lawyers list for 2026. Morrison Foerster...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

Eight Morrison Foerster partners have been named to Lawdragon’s 500 Leading Global Cyber Lawyers list for 2026. Morrison Foerster is one of only a handful of firms with eight or more individuals included in the list, which is compiled from research, submissions by firms and clients, and peer review.MoFo partners recognized include:<ul><li>Edward S. Chang – Los Angeles</li><li>Linda K. Clark – Miami</li><li>Kaylee Cox Bankston – Washington, D.C.</li><li>Melissa M. Crespo – Washington, D.C.</li><li>Annabel Gillham – London</li><li>Nathan D. Taylor – Washington, D.C.</li><li>Alexander van der Wolk – Brussels</li><li>Miriam H. Wugmeister – New York</li></ul>Morrison Foerster is recognized as an undisputed leader in privacy and data security worldwide. Our multidisciplinary, award-winning Data, Cyber + Privacy Group boasts more than 60 lawyers in offices in the United States, Europe, and Asia. The team provides creative and practical advice concerning all stages of the information lifecycle.Lawdragon is a leading digital media company that recognizes the most effective lawyers and legal professionals in a wide variety of industries and areas.The full list is available on Lawdragon’s <a href="https://www.lawdragon.com/guides/2026-05-08-the-2026-lawdragon-500-leading-global-cyber-lawyers" target="_blank">website</a>.

Eight MoFo Partners Named Among Lawdragon’s 500 Leading Global Cyber Lawyers

Sign Up

Ed Chang is a partner in our Los Angeles office. Ed represents institutional clients in all aspects of complex litigation, with an emphasis on high-stakes consumer and commercial litigation. His focus includes cybersecurity and privacy class actions, complicated business disputes, and regulatory investigation and compliance matters. Ed also advises major corporations on complex cybersecurity incidents, including data breaches and ransomware attacks, and is frequently acknowledged as a leading cyber law practitioner in the United States. Ed has acted as lead counsel in numerous class and mass actions, arbitrations, government investigations, and other “bet-the-company” disputes. He also regularly provides strategic counsel on sensitive cybersecurity and privacy issues, advising executive leadership and boards of directors on mergers and acquisitions, public relations, and crisis management. Ed has been named a Top 500 Leading Global Cyber Lawyer by Lawdragon magazine in 2024 and 2025, as well as a Top Cyber Lawyer by the Daily Journal and a National Cybersecurity & Privacy Rising Star by Law360 and LexisNexis. <h4>Recent Representative Matters </h4><ul><li>Currently representing clients in a broad array of individual and nationwide class/mass actions, arbitrations, and government investigations. </li><li>Secured complete dismissals of over 500 mass arbitration claims brought against a prominent specialty retailer. </li><li>Achieved full dismissals in multiple MDL privacy class and representative actions involving major vehicle original equipment manufacturers. </li><li>Defended a national fast-food chain in a data breach class action and reached a favorable individual settlement after three years of protracted litigation. </li><li>Represented an online retailer in a nationwide technology class action and successfully precluded all class claims. </li><li>Acted for a leading homebuilder in several nationwide product defect class actions and defeated class certification. </li><li>Defended a medical device manufacturer in multiple class actions and successfully foreclosed the class claims. </li><li>Represented an information services provider in class litigation alleging deceptive marketing and obtained complete dismissals. </li><li>Secured a favorable appellate published opinion for a telecommunications company in a bellwether class action.</li></ul>

Edward Chang

Partner

Linda Clark is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. Prior to joining the firm, Linda served as the Chief Data Security Counsel for RELX, where she led the data security legal compliance efforts for RELX in over 40 countries and across their operations in four different market segments worldwide. Prior to that, Linda was a litigator at a large New York law firm. She has over 20 years’ experience advising clients, including on data security best practices and obligations, designing and implementing frameworks for compliance across large multinational organizations, and in complex litigation and regulatory matters.Linda’s practice centers on crafting strategic and comprehensive data security risk management programs, providing business-focused and practical advice, and leveraging her knowledge and deep experience to help organizations and their stakeholders, at all levels, prepare for and respond to incidents on a global and operationally feasible basis. This includes working with clients to proactively prepare for cyber incidents, including by developing incident response programs and risk assessment methodologies and conducting tabletop exercises for global audiences of varying seniority and responsibility. This comprehensive approach to incident readiness helps organizations hone the skills they will need to support critical decision making in high-stakes situations, allowing organizations to implement and leverage an incident response framework that goes beyond legal compliance and supports ethical decision-making.A defining aspect of Linda’s counsel is her ability to translate complex legal issues into actionable advice while accounting for the myriad and diverse concerns of stakeholders at all levels of an organization. She combines an in-depth understanding of technology and cybersecurity with knowledge of the challenges and opportunities clients face when addressing real-world issues. She has a broad command of global privacy and data security laws, having worked on matters in the United Kingdom, the United States, France, Japan, the Netherlands, South Africa, Australia, China, Austria, Brazil, the Philippines, and Germany. She frequently engages with regulators and law enforcement, enabling her to understand and navigate regulatory reviews, third-party audits, and investigations on behalf of her clients around the globe.An industry thought leader, Linda frequently speaks at conferences and educational institutions and is sought out by leading publications and think tanks for her analysis on timely data security and privacy issues, including the American Bar Association (ABA) Cyber Security Institute on topics such as ethical obligations to secure client information, cybersecurity risks, trends in the law relating to data security, and risk management and minimization strategies. Linda also speaks at schools and universities to educate younger generations about safeguarding their digital identities. Additionally, Linda works with leading U.S. nonpartisan, nonprofit law-and-policy think tank, the Sedona Conference, where she has served on the Data Security and Privacy Liability Leadership Council since 2017.Linda graduated cum laude from Barnard College, Columbia University, and is a graduate of the University of Michigan Law School. While at Barnard, Linda was a Research Assistant for the Human Learning and Memory lab, and also focused her studies on human and primate cognition. She is also a Certified Information Privacy Professional (CIPP/US) and a Steering Committee Member, New York City Bar’s Cyrus R. Vance Center for International Justice, Miami Chapter of “Women in the Profession.” In 2025, Linda was named to Law360’s Cybersecurity & Privacy Editorial Board. She previously served on the Steering Committee for the Cybersecurity Leaders’ Roundtable as well as on the Executive Committee of the Leukemia and Lymphoma Society.

Linda Clark

Kaylee Cox Bankston is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. She advises clients across all industries on complex cybersecurity, privacy, and data matters, including cybersecurity investigations and breach preparation, corporate governance and risk management, regulatory investigations, litigation and class action defense, and other emerging industry issues, such as the use and impacts of artificial intelligence (AI). Kaylee was recognized by The Legal 500 US for her work in cyber law (including data privacy and data protection) in 2023 and 2025. Kaylee is also a co-author of The International Handbook of AI Law: A Guide to Understanding and Resolving the Legal Challenges of Artificial Intelligence.<ul><li>Cybersecurity Investigations and Incident Response Preparedness: Kaylee has extensive experience leading clients in investigations of sophisticated cyberattacks and security breaches conducted by high-profile threat actor groups, including ransomware, data extortion events, and business email compromises. She also counsels clients on incident response programs and preparedness, including developing and conducting cybersecurity simulations and tabletop exercises, preparing clients for security assessments, audits, and testing, and advising on post-assessment implementation and risk mitigation strategies. Kaylee advises clients on cybersecurity information and intelligence sharing, data access requests, and related national security matters.</li><li>Regulatory Investigations and Litigation: Kaylee has substantial experience representing clients in privacy and security investigations and related regulatory actions. She has represented companies in cybersecurity and privacy matters before U.S. and international regulators, including the U.S. Federal Trade Commission (FTC), the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services, Office of Civil Rights (HHS OCR), New York Department of Financial Services (NYDFS), and state attorneys general, and in litigation matters in various U.S. federal and state courts.</li><li>Compliance, Corporate Governance, and Public Companies Counseling: Kaylee has counseled numerous companies on how to navigate and comply with the new DOJ “Bulk Data” regulations, implementing Executive Order 14117. She has advised clients on the recent SEC Cybersecurity Disclosure Rules, including counseling on disclosure obligations for material cybersecurity incidents and developing annual SEC cybersecurity disclosures for publicly traded companies. Kaylee also counsels executives and boards of directors on cybersecurity and privacy corporate governance and risk management matters and regularly advises clients on the development of cybersecurity and privacy programs and compliance with other regulatory requirements and standards, such as the NYDFS Part 500 cybersecurity requirements, the FTC Safeguards Rule, the FTC Act, the California Consumer Privacy Act (CCPA) and state data privacy laws, the Illinois Biometric Information Privacy Act (BIPA), the Children’s Online Privacy Protection Act (COPPA), the Health Insurance Portability and Accountability Act (HIPAA), the Family Educational Rights and Privacy Act (FERPA), the Gramm-Leach-Bliley Act (GLBA), and the Payment Card Industry Data Security Standard (PCI DSS).</li><li>Corporate Transactions and Vendor Management: Kaylee counsels clients on vendor management programs, including developing security and privacy contracting frameworks and negotiating data protection agreements. Kaylee also advises clients on privacy and security diligence matters in connection with corporate transactions.</li></ul>Kaylee is an adjunct professor at Georgetown University Law Center, where she teaches a cybersecurity course. Kaylee is a Certified Information Privacy Professional (CIPP) through the International Association of Privacy Professionals. She previously served on the Center for a New American Security, Technology Policy Lab Working Group for Data Privacy and the Bar Association of the District of Columbia Board of Directors and National Security Steering Committee. She is also a member of Women in CyberSecurity (WiCyS).

Kaylee Bankston

Melissa Crespo helps clients navigate a wide range of challenging privacy compliance and data security matters with a focus on the health information and the health care sector. She regularly helps clients develop and implement privacy compliance programs and advises companies on managing risk in connection with cutting-edge technologies and data initiatives.Melissa has particular experience in advising clients on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other laws governing the collection and use of medical and health information.Melissa regularly counsels clients responding to data breaches and security incidents. She has successfully defended clients in numerous regulatory inquiries regarding data security practices, including investigations by the Federal Trade Commission, the U.S. Department of Health and Human Services, state attorneys general, and foreign regulators following data security incidents.Melissa also advises multinational companies on the privacy and data security aspects of their M&A transactions and has experience drafting and negotiating tailored privacy and data security contract provisions.In 2019, 2020, and 2021, The Legal 500 US recognized Melissa as a “Rising Star” in the area of cyber law, data privacy, and data protection. In 2016, she was shortlisted for the “Future Leader – Gender Diversity” award at the inaugural Chambers USA Diversity Awards. Melissa was a 2015 recipient of the Burton Award for Legal Achievement, which honors excellence in legal writing.Melissa earned her J.D., cum laude, from Howard University School of Law.

Melissa Crespo

As a member of our renowned global data privacy team, Annabel Gillham specializes in employee data protection and data crisis management. Described by clients as “excellent, very pragmatic, efficient and completely client-oriented”, she works across a variety of sectors, including technology, retail, and financial services, and frequently manages multi-jurisdictional advice for international clients. Her practice includes advice on:<ul><li>cross-border labor and employment matters</li><li>employee litigation</li><li>data privacy compliance management</li><li>data security breach management</li><li>internal and regulatory investigations</li></ul>Annabel regularly helps senior management and HR executives with the “people” aspects of takeovers, restructuring projects, business and share sales, and outsourcings. She also advises employers in relation to sensitive claims, such as unlawful discrimination, equal pay, and whistleblowing. Annabel also advises on team moves.She supports her clients on all aspects of General Data Protection Regulation compliance and regularly advises organizations facing ICO enforcement action. She has developed particular specialties in complex areas, such as the collection and use of data relating to criminal offenses and the application of data protection law to insolvency practitioners.As an experienced litigator with experience in helping clients defend group litigation, Annabel helps clients develop their strategy for responding to regulatory action and court claims relating to the use of employee and customer personal data. She regularly designs and presents employment and data protection law training and updates to senior managers and HR executives and is involved in preparing responses to UK government consultations.In addition, Annabel is qualified to practice in the British Virgin Islands, where she spent three years advising on cross border commercial litigation and insolvency matters, including high value board and shareholder disputes, freezing orders, and third-party disclosure orders.

Annabel Gillham

Recognized as an authority on financial privacy issues, Nathan helps financial institutions and other companies develop practical solutions for complying with privacy and data security laws. In particular, Nathan tackles the most complex issues relating to the privacy and security of financial information.Co-author of the leading financial privacy treatise, The Law of Financial Privacy, Nathan is recognized in the industry for his exceptional legal work, including being named as an Up and Coming Nationwide Privacy & Data Security practitioner on Chambers USA’s 2018, 2019, and 2020 lists. In his many accolades, his clients praise him as “a tremendous lawyer” who is “smart and quick on his feet,” with a “strong depth of knowledge and experience.” Nathan is also known as “a go-to guy for a deeper dive on bank privacy issues, the Fair Credit Reporting Act and other matters. When he gives you a memo, it is gold-plated – you know that you can rely upon it and that it will be thoughtful” (Chambers USA 2021). Nathan is ranked in Chambers USA and Chambers Global 2021, with clients noting his exceptional work in financial privacy law, proficiency at handling various governmental investigations, and his “deep well of knowledge, which he delivers in a well-organised, thoughtful and extremely helpful manner."As state privacy law appears to be entering a new era with the adoption of the California Consumer Privacy Act (“CCPA”), Nathan is assisting many banks, insurance companies, broker dealers, and other financial institutions in making sense of the complex law and the challenges presented by significant, but often confusing, new privacy obligations. Given the breadth of his work on CCPA issues, Nathan provides clients with valuable benchmarking across the financial industry.Nathan also continues to help companies across industries develop solutions to comply with the myriad state data breach and data security laws that have been enacted since 2003. Understanding the complexities that businesses face in complying with these laws, Nathan testified before Congress on the <a href="https://financialservices.house.gov/uploadedfiles/02.14.2018_nathan_taylor_testimony.pdf" target="_blank">challenges</a> that the ever-growing patchwork of state laws present. These are complexities that he understands intimately, having advised companies on hundreds of significant data incidents, including many of the nation’s largest and highest-profile data breaches.Nathan also has defended companies in Congressional and state AG investigations regarding data, cyber, and privacy. He represented Target in its defense of a multistate AG investigation into the company’s 2013 data breach, resulting in a settlement with 47 states and the District of Columbia, at the time the largest-ever multistate settlement for a data security incident.Nathan contributes to the development of the firm’s <a href="/privacy-library/">Privacy Library</a> and MoFoNotes subscription database, which help companies keep apprised of data, cyber, and privacy compliance requirements in jurisdictions around the world.

Nathan Taylor

<div class="videoWrapper">Alex van der Wolk, managing partner of the firm’s Amsterdam office and chair of Morrison Foerster’s European Data, Cyber + Privacy practice, employs his nearly 20 years of experience to advise global companies on their most complex data strategies and compliance programs governing all aspects of information management. Alex’s clients benefit from his practical approach and global perspective, saying: “he quickly gets to the heart of the issue and provides solid, pragmatic advice based on the experience he has gained,” “in addition to having very strong legal knowledge, he has a commercial understanding and provides great insight in global matters,” and  “Alex is a true privacy expert with the ability to offer practical guidance on complex problems” (Chambers EU).</div>Alex helps clients develop privacy and data strategies at the forefront of their digital and data-driven endeavors, especially those involving new technologies, such as artificial intelligence and the metaverse. He has particular experience assisting clients with structuring their approach to data in specialized areas, such as health-tech, Agtech, and Adtech. Alex is an experienced litigator, representing clients in privacy litigation in Europe, including successfully representing clients in the first class action cases in the Netherlands and the UK. Additionally, Alex is often called upon to head crisis management teams for clients facing investigations by data protection authorities or responding to cybersecurity incidents. He counsels clients on their incident and cyber preparedness and has done significant work advising clients on EU cyber and data regulatory frameworks, such as NIS2, DORA, the Cyber Resilience Act, and the EU Data Act.Notably, Alex was one of the first practitioners in Europe to help companies set up Binding Corporate Rules (BCRs), and since that time has used this deep knowledge to develop a longstanding and unparalleled track record in obtaining regulatory approval for BCRs, both in the EU and in the UK.Alex is a frequent speaker at high-profile international conferences, including IAPP and South by Southwest (SXSW), and is a guest lecturer at the Tilburg Institute for Law, Technology, and Society. He is a Dutch-qualified lawyer and a member of the Amsterdam and Brussels Bars. He speaks fluent English and Dutch.

Alex van der Wolk

Managing Partner, Amsterdam

Few lawyers in the world have Miriam’s breadth and understanding of privacy and data security laws, obligations, and practices. As chair of Morrison Foerster’s preeminent global Data, Cyber + Privacy Group, leading 60+ lawyers, Miriam is regularly called upon by some of the world’s largest and most complex multinational organizations to confront their most difficult U.S. and international privacy and cybersecurity challenges. Miriam is a trusted advisor who provides legal and strategic advice on all areas of international privacy and data protection issues. She works with global companies on the planning and execution of complex global compliance efforts and helps them find practical solutions to use and manage personal information in every country in the world. She also defends regulatory matters relating to privacy and cybersecurity in the United States and internationally and advises on the Department of Justice Bulk Data Rules. Her counsel is particularly prized for cybersecurity preparedness and breach response. Miriam and her team have navigated some of the largest and most consequential cybersecurity incidents in history, including assisting Mandiant when it discovered and warned the world about the SolarWinds compromise. Having helped hundreds of clients respond to breaches, Miriam is frequently called upon to advise and educate boards of directors regarding cybersecurity and the key role that boards play in understanding and overseeing the potential risks. Miriam works with companies to develop comprehensive customized incident response plans, train staff, conduct extensive tabletop exercises, and address key issues with executive management. While she regularly advises clients on responses to ransomware attacks and other cyber extortion incidents, she works on all aspects that arise in the context of large security incidents, including communication strategies, notifications to customers, consumers, and regulators; public disclosures; interactions with law enforcement globally; litigation; and investigations by regulators around the world.Miriam serves as a board member of the ADP AI & Data Ethics Committee and is a leader in MoFo’s AI Group, a cross-practice team that provides sophisticated, full-service representation to a wide range of clients with companies that both develop and use cutting-edge, rapidly changing technology in the AI space. Miriam uses her extensive industry experience and collaborative global approach to help her clients integrate the newest trends and developments in AI with their business needs.Recognized as a market leader by all major directories, Miriam has been ranked in the top tier of privacy and data security lawyers worldwide by Chambers USA and Chambers Global for well over a decade. She was an inaugural inductee into The Legal 500 Hall of Fame, which is comprised of outstanding U.S. lawyers who have been recommended as The Legal 500’s Leading Lawyers for the last six consecutive years. The Cybersecurity Docket has recognized Miriam as one of its Incident Response 50, a list of the top data breach response lawyers globally. She has been named one of Financial Times’ Top 10 Innovative Lawyers in North America and a National Law Journal Cybersecurity and Data Privacy Trailblazer for her breakthrough work in this space. Miriam was also previously designated as an Ethisphere Attorney Who Matters and a BTI Client Service All-Star. A frequent commentator on cybersecurity, she has been interviewed by media outlets including CNBC, The New York Times, and The Wall Street Journal, among many others.