Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

Morrison Foerster’s Data, Cyber + Privacy Practice Awarded Tier 1 Ranking in The Legal 500 United States 2026

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

Morrison Foerster has once again been awarded a Tier 1 in The Legal 500 United States’ latest Cyber Law (including Data...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

Morrison Foerster has once again been awarded a Tier 1 in The Legal 500 United States’ latest Cyber Law (including Data Protection and Privacy) category.<span class="embedded-entry redactor-component inline-entry" type="entry" data-sys-entry-uid="blt695394cdec56df4a" data-sys-entry-locale="en-us" data-sys-content-type-uid="table_content" sys-style-type="inline"><span class="rich-text-component-embed" data-component-info="{&quot;uid&quot;:&quot;blt695394cdec56df4a&quot;,&quot;locale&quot;:&quot;en-us&quot;,&quot;_version&quot;:1,&quot;table_source&quot;:&quot;&lt;div style=\&quot;position:relative;width:auto;padding:0 0 140.77%;height:0;top:0;left:0;bottom:0;right:0;margin:0;border:0 none\&quot; id=\&quot;experience-6a39b52641f33\&quot; data-aspectRatio=\&quot;0.71038251\&quot;&gt;&lt;iframe allowfullscreen src=\&quot;https://view.ceros.com/mofo/l500-usa-2026-data-cyber-privacy?heightOverride=915\&quot; style=\&quot;position:absolute;top:0;left:0;bottom:0;right:0;margin:0;padding:0;border:0 none;height:1px;width:1px;min-height:100%;min-width:100%\&quot; frameborder=\&quot;0\&quot; class=\&quot;ceros-experience\&quot; title=\&quot;Legal500 USA 2026, Data, Cyber + Privacy\&quot; scrolling=\&quot;no\&quot;&gt;&lt;/iframe&gt;&lt;/div&gt;&lt;script type=\&quot;text/javascript\&quot; src=\&quot;https://view.ceros.com/scroll-proxy.min.js\&quot; data-ceros-origin-domains=\&quot;view.ceros.com\&quot;&gt;&lt;/script&gt;&quot;,&quot;title&quot;:&quot;260623-morrison-foerster-data-cyber-privacy-practice-awarded-tier-1&quot;,&quot;publish_details&quot;:{&quot;time&quot;:&quot;2026-06-23T14:58:27.873Z&quot;,&quot;user&quot;:&quot;blt7a142e61d8fbe8f4&quot;,&quot;environment&quot;:&quot;bltf4674cd9142c5020&quot;,&quot;locale&quot;:&quot;en-us&quot;,&quot;_trace&quot;:&quot;array_node;description;publish_details&quot;,&quot;_key&quot;:&quot;publish_details&quot;},&quot;_fetched&quot;:true,&quot;_content_type_uid&quot;:&quot;table_content&quot;,&quot;_trace&quot;:&quot;array_node;description&quot;,&quot;_key&quot;:&quot;key&quot;}" data-component-type="table_content" data-component-inline="true">This recognition is the latest in a series of recent wins for MoFo’s Data, Cyber + Privacy group, which has firmly cemented its position as the leading firm handling the world’s most complex and significant privacy and data security mandates.Congratulations to the attorneys from the Data, Cyber + Privacy group who earned recognition for their outstanding work on behalf of our cyber law clients.To view the complete list of Morrison Foerster’s rankings in the 2026 edition of The Legal 500 US, please visit the <a href="https://www.legal500.com/firms/50701-morrison-foerster/c-united-states/rankings" target="_blank">publication’s website</a>.

Morrison Foerster’s Data, Cyber + Privacy Practice Awarded Tier 1 Ranking in The Legal 500 United States 2026

Sign Up

Few lawyers in the world have Miriam’s breadth and understanding of privacy and data security laws, obligations, and practices. As chair of Morrison Foerster’s preeminent global Data, Cyber + Privacy Group, leading 60+ lawyers, Miriam is regularly called upon by some of the world’s largest and most complex multinational organizations to confront their most difficult U.S. and international privacy and cybersecurity challenges. Miriam is a trusted advisor who provides legal and strategic advice on all areas of international privacy and data protection issues. She works with global companies on the planning and execution of complex global compliance efforts and helps them find practical solutions to use and manage personal information in every country in the world. She also defends regulatory matters relating to privacy and cybersecurity in the United States and internationally and advises on the Department of Justice Bulk Data Rules. Her counsel is particularly prized for cybersecurity preparedness and breach response. Miriam and her team have navigated some of the largest and most consequential cybersecurity incidents in history, including assisting Mandiant when it discovered and warned the world about the SolarWinds compromise. Having helped hundreds of clients respond to breaches, Miriam is frequently called upon to advise and educate boards of directors regarding cybersecurity and the key role that boards play in understanding and overseeing the potential risks. Miriam works with companies to develop comprehensive customized incident response plans, train staff, conduct extensive tabletop exercises, and address key issues with executive management. While she regularly advises clients on responses to ransomware attacks and other cyber extortion incidents, she works on all aspects that arise in the context of large security incidents, including communication strategies, notifications to customers, consumers, and regulators; public disclosures; interactions with law enforcement globally; litigation; and investigations by regulators around the world.Miriam serves as a board member of the ADP AI & Data Ethics Committee and is a leader in MoFo’s AI Group, a cross-practice team that provides sophisticated, full-service representation to a wide range of clients with companies that both develop and use cutting-edge, rapidly changing technology in the AI space. Miriam uses her extensive industry experience and collaborative global approach to help her clients integrate the newest trends and developments in AI with their business needs.Recognized as a market leader by all major directories, Miriam has been ranked in the top tier of privacy and data security lawyers worldwide by Chambers USA and Chambers Global for well over a decade. She was an inaugural inductee into The Legal 500 Hall of Fame, which is comprised of outstanding U.S. lawyers who have been recommended as The Legal 500’s Leading Lawyers for the last six consecutive years. The Cybersecurity Docket has recognized Miriam as one of its Incident Response 50, a list of the top data breach response lawyers globally. She has been named one of Financial Times’ Top 10 Innovative Lawyers in North America and a National Law Journal Cybersecurity and Data Privacy Trailblazer for her breakthrough work in this space. Miriam was also previously designated as an Ethisphere Attorney Who Matters and a BTI Client Service All-Star. A frequent commentator on cybersecurity, she has been interviewed by media outlets including CNBC, The New York Times, and The Wall Street Journal, among many others.

Miriam Wugmeister

Global Chair of Data, Cyber + Privacy

Boris Segalis is a partner in Morrison Foerster’s Cyber, Data + Privacy Group. He advises companies at the intersection of data, technology, and regulation, helping them navigate complex legal frameworks while building and scaling data-driven products and services.As a leading privacy and cybersecurity lawyer, Boris’s practice is focused on issues where the law is evolving and the answers are not always clear. He works with clients to apply existing regulatory regimes to new technologies and business models, particularly in areas such as AI, data monetization, digital platforms, and emerging financial technologies. His work spans strategic product counseling, corporate transactions, and high-stakes regulatory matters, including representing companies in investigations by the Federal Trade Commission, state attorneys general, and global regulators.Clients rely on Boris for compliance advice and for practical guidance on how to operate in uncertain environments, whether designing new products, assessing regulatory risk, or responding to government scrutiny. He regularly advises on U.S. and global privacy and cybersecurity laws, including U.S. federal financial privacy laws, state privacy regimes, emerging AI requirements, and foreign privacy and cybersecurity regimes frameworks.He represents a broad range of companies, from high-growth startups to global public companies, across industries including technology, AI, financial services and Fintech, crypto, life sciences, consumer platforms, AdTech, and media.Boris has been recognized for seven consecutive years by Chambers USA in Privacy & Data Security and is also ranked by Chambers Global in Privacy & Data Security – USA. He is recognized by The Legal 500 as a leading lawyer in cyber law (including data privacy and data protection) and was previously named to Crain’s New York Business’s 40 Under 40.Boris holds a bachelor’s degree in mechanical engineering from Georgia Tech and a J.D. from New York University School of Law. He is a Certified Information Privacy Professional (CIPP/US) and has served as co-chair of the New York City KnowledgeNet chapter of the International Association of Privacy Professionals (IAPP), as well as on the IAPP Research Board. He graduated from Riga Simon Dubnow Jewish Secondary School in Riga, Latvia, in 1991.

Boris Segalis

Partner

Linda Clark is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. Prior to joining the firm, Linda served as the Chief Data Security Counsel for RELX, where she led the data security legal compliance efforts for RELX in over 40 countries and across their operations in four different market segments worldwide. Prior to that, Linda was a litigator at a large New York law firm. She has over 20 years’ experience advising clients, including on data security best practices and obligations, designing and implementing frameworks for compliance across large multinational organizations, and in complex litigation and regulatory matters.Linda’s practice centers on crafting strategic and comprehensive data security risk management programs, providing business-focused and practical advice, and leveraging her knowledge and deep experience to help organizations and their stakeholders, at all levels, prepare for and respond to incidents on a global and operationally feasible basis. This includes working with clients to proactively prepare for cyber incidents, including by developing incident response programs and risk assessment methodologies and conducting tabletop exercises for global audiences of varying seniority and responsibility. This comprehensive approach to incident readiness helps organizations hone the skills they will need to support critical decision making in high-stakes situations, allowing organizations to implement and leverage an incident response framework that goes beyond legal compliance and supports ethical decision-making.A defining aspect of Linda’s counsel is her ability to translate complex legal issues into actionable advice while accounting for the myriad and diverse concerns of stakeholders at all levels of an organization. She combines an in-depth understanding of technology and cybersecurity with knowledge of the challenges and opportunities clients face when addressing real-world issues. She has a broad command of global privacy and data security laws, having worked on matters in the United Kingdom, the United States, France, Japan, the Netherlands, South Africa, Australia, China, Austria, Brazil, the Philippines, and Germany. She frequently engages with regulators and law enforcement, enabling her to understand and navigate regulatory reviews, third-party audits, and investigations on behalf of her clients around the globe.An industry thought leader, Linda frequently speaks at conferences and educational institutions and is sought out by leading publications and think tanks for her analysis on timely data security and privacy issues, including the American Bar Association (ABA) Cyber Security Institute on topics such as ethical obligations to secure client information, cybersecurity risks, trends in the law relating to data security, and risk management and minimization strategies. Linda also speaks at schools and universities to educate younger generations about safeguarding their digital identities. Additionally, Linda works with leading U.S. nonpartisan, nonprofit law-and-policy think tank, the Sedona Conference, where she has served on the Data Security and Privacy Liability Leadership Council since 2017.Linda graduated cum laude from Barnard College, Columbia University, and is a graduate of the University of Michigan Law School. While at Barnard, Linda was a Research Assistant for the Human Learning and Memory lab, and also focused her studies on human and primate cognition. She is also a Certified Information Privacy Professional (CIPP/US) and a Steering Committee Member, New York City Bar’s Cyrus R. Vance Center for International Justice, Miami Chapter of “Women in the Profession.” In 2025, Linda was named to Law360’s Cybersecurity & Privacy Editorial Board. She previously served on the Steering Committee for the Cybersecurity Leaders’ Roundtable as well as on the Executive Committee of the Leukemia and Lymphoma Society.

Linda Clark

Marian Waldmann Agarwal is a partner in the Data, Cyber + Privacy Group at Morrison Foerster. She also co-leads the firm’s Artificial Intelligence Group and is a member of the global Environmental, Social, and Governance (ESG) Responsible Tech Committee. Marian’s unique blend of business and legal skills, honed through her background in information systems and business management, is a key asset in her role. Her in-house experience as a secondee to two different companies has provided her with firsthand knowledge of the internal business needs required for company initiatives to succeed. Marian has been instrumental in advising global clients on the developing field of AI. Clients seek her guidance due to her extensive understanding of, and experience with, the ethical use of AI and the developing legal compliance requirements, including data privacy and regulatory provisions, in connection with the design and implementation of innovative AI tools. Her work extends to helping clients identify and mitigate the potential risks associated with AI technologies.Marian counsels clients across a range of industries, including technology, finance, consumer goods and services, healthcare, insurance, media, and hospitality. She assists in designing and building their privacy programs, advising on compliance with U.S. and foreign privacy and data protection laws, such as the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR). Her work includes drafting internal policies, procedures, and guidelines for legal and non-legal audiences that incorporate privacy best practices and legal requirements in daily operations. One of Marian’s core strengths is her ability to comprehensively assess and improve privacy programs, and ensure they remain compliant with evolving privacy laws and regulations. She also drafts and negotiates contracts to protect clients’ data in key commercial agreements, advises on cross-border data transfer issues, and assists with completing multijurisdictional surveys of privacy obligations.In addition, Marian uses her privacy, data security, and AI implementation skills to provide pro bono counseling services to a variety of non-profit clients.Marian received her J.D. from University of Pennsylvania Law School in 2004 and her B.S. and M.B.A. from the State University of New York at Buffalo in 1999. Prior to attending law school, she worked as an application specialist for a small software company.

Marian A. Waldmann Agarwal

Clients seek out Tiffany for her successful track record in defending class action claims on behalf of clients in a broad range of industries, including technology, healthcare, and consumer product companies.Tiffany leads high-stakes class actions at the cutting edge of innovation and technology. She has a successful track record of defending industry-leading clients in their most complex class actions. She also has advised extensively on privacy matters, unfair business practice claims and consumer advertising issues. Tiffany is co-chair of the firm’s Technology Industry Group and a former co-chair of MoFo’s global Litigation Department and the firm’s Complex Litigation + Advisement Practice Group.The Daily Journal named Tiffany to its list of Top Women Lawyers and listed her as a 2026 Leading Commercial Litigator in California. Chambers USA 2025 again ranked her in commercial litigation and privacy & data security litigation, while The Legal 500 2025 again recommended her in general commercial disputes, product liability and marketing and advertising. Lawdragon named Tiffany on its 2026 list of 100 Leading AI & Legal Tech Advisors. BTI Consulting Group has recognized Tiffany as one of a small group of attorneys nationwide who represent the “absolute best of the best” in the area of client service. Her clients include leaders in the technology, healthcare, financial services, and retail sectors.Because she is committed to the firm’s pro bono program, Tiffany works on diverse matters in that arena, including representing numerous clients in connection with guardianship and immigration proceedings.Tiffany earned her B.A. with high honors from the University of California, Berkeley and was a member of Phi Beta Kappa. She received her J.D. from the University of California, Boalt Hall School of Law, where she was editor-in-chief of the Asian Law Journal. Following law school, she was a judicial clerk for the Honorable Marian Blank Horn of the United States Court of Federal Claims and also served as a judicial clerk for the Honorable Susan R. Bolton of the United States District Court for the District of Arizona.

Tiffany Cheung

Purvi G. Patel is the former managing partner of the Los Angeles office.Purvi represents retail, e-commerce, and other consumer-oriented businesses in significant advertising, unfair competition, consumer fraud, and privacy matters. She has built a robust practice advising household names on various compliance issues and defending them in complex and class action litigation in federal and state courts across the country, winning motions to dismiss, defeating class certification, and securing summary disposition in several multi-million dollar lawsuits. Purvi is a strategic and practical thinker who is in tune with her clients’ priorities, which leads to successful outcomes both inside and outside the courthouse.Practice Leader. Purvi has a defined niche that cuts across the firm’s Consumer Litigation, Class Actions, and Data, Cyber + Privacy Groups. With a focus on businesses’ collection of personally identifiable information (PII), Purvi is a recognized leader in defending lawsuits involving the collection, use, and disclosure of PII. In addition, due to her vast experience handling class action litigation for clients across sectors, Purvi has notched significant victories for industry-leading companies, including securing summary judgment and defeating class certification in some of the most plaintiff-friendly jurisdictions nationwide.Purvi’s extensive litigation experience uniquely positions her to counsel clients on compliance with established and emerging laws and regulations, including the potential privacy implications of business practices relating to the collection of PII. Purvi is an expert in numerous California privacy laws, including the California Consumer Privacy Act, the California Invasion of Privacy Act, and California’s Song-Beverly Credit Card Act (and analog statutes in effect in other states).Purvi is also committed to the firm’s pro bono initiatives and has worked on a number of pro bono matters during her tenure at the firm. Most recently, she represented an interfaith coalition of more than 50 religious organizations as amici in various cases challenging the 2017 “travel ban” Executive Orders. In 2014, Purvi successfully argued a Ninth Circuit appeal on behalf of a U.S. citizen who was wrongfully subjected to two years of pre-trial detention as a result of a detainer imposed by U.S. Immigration and Customs Enforcement (Mendia v. Garcia, 768 F.3d 1009 (9th Cir. 2014)).Firm Leader. Purvi is committed to advancing diversity at Morrison & Foerster. For more than five years, she served as the Co-Chair of the firm’s Diversity Strategy Committee. During her tenure, Purvi contributed significantly to the Committee’s success, including implementing a LGBTQ+ Gender Inclusive Policy, and launching MoFo’s innovative Allies Network. She was the firm’s Leadership Council on Legal Diversity (LCLD) Fellow in 2014 and remains active in the organization as an alumna. In addition, Purvi served as hiring partner for the Los Angeles office between 2015 and 2023.Community Leader. Purvi is also actively engaged in the community. In 2019, she was a founding board member of Legal Education Access Pipeline (LEAP), a fellows program dedicated to increasing access to legal education for underrepresented populations.  She has also been working with “Just the Beginning – A Pipeline Organization” (JTB) since 2015 when she joined an inaugural steering committee of judges, in-house and outside counsel, and educators to launch a Los Angeles-based Summer Legal Institute. She is a past co-president of the South Asian Bar Association of Southern California (SABA-SC), and in 2023, was honored with its Trailblazer award. She was selected for her “trailblazing efforts which have paved the way for a more inclusive and representative profession” and “her commitment to breaking barriers in the legal profession.” In 2019, Purvi was named SABA-SC’s Mentor of the Year.Representative Matters<ul><li>Privacy Class Action Litigation. Defending software development company in two putative class actions brought under state common law based on alleged violations of the federal Children’s Online Privacy Protection Act. Obtained dismissal of putative privacy class action against Southern California grocery store chain, which was affirmed on appeal. </li><li>Class Action Litigation Relating to Consumer PII. Represented national retailers in more than 30 California Song-Beverly Credit Card Act and Massachusetts’ Song-Beverly analog matters arising out of the alleged collection of PII, securing favorable settlements or walkaways for many following early negotiations with plaintiffs’ counsel. Trial attorney for national retailers in two Song-Beverly class actions. For Target Corporation, led pre-MDL team coordinating and managing responses to single-plaintiff and putative class action complaints filed in wake of data breach.</li></ul><ul><li>False Advertising and Consumer Class Action Litigation. Defeated class certification for household-name companies in numerous matters involving consumer protection claims arising out of alleged misrepresentations and omissions as well as lawsuits brought under unfair competition, false advertising, and product liability laws. Also obtained dismissals at the pleadings stage in cases alleging unfair, unlawful, and fraudulent marketing and advertising practices.</li></ul>

Purvi Patel

Kaylee Cox Bankston is a partner in Morrison Foerster’s Data, Cyber + Privacy Group. She advises clients across all industries on complex cybersecurity, privacy, and data matters, including cybersecurity investigations and breach preparation, corporate governance and risk management, regulatory investigations, litigation and class action defense, and other emerging industry issues, such as the use and impacts of artificial intelligence (AI). Kaylee was recognized by The Legal 500 US for her work in cyber law (including data privacy and data protection) in 2023 and 2025. Kaylee is also a co-author of The International Handbook of AI Law: A Guide to Understanding and Resolving the Legal Challenges of Artificial Intelligence.<ul><li>Cybersecurity Investigations and Incident Response Preparedness: Kaylee has extensive experience leading clients in investigations of sophisticated cyberattacks and security breaches conducted by high-profile threat actor groups, including ransomware, data extortion events, and business email compromises. She also counsels clients on incident response programs and preparedness, including developing and conducting cybersecurity simulations and tabletop exercises, preparing clients for security assessments, audits, and testing, and advising on post-assessment implementation and risk mitigation strategies. Kaylee advises clients on cybersecurity information and intelligence sharing, data access requests, and related national security matters.</li><li>Regulatory Investigations and Litigation: Kaylee has substantial experience representing clients in privacy and security investigations and related regulatory actions. She has represented companies in cybersecurity and privacy matters before U.S. and international regulators, including the U.S. Federal Trade Commission (FTC), the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services, Office of Civil Rights (HHS OCR), New York Department of Financial Services (NYDFS), and state attorneys general, and in litigation matters in various U.S. federal and state courts.</li><li>Compliance, Corporate Governance, and Public Companies Counseling: Kaylee has counseled numerous companies on how to navigate and comply with the new DOJ “Bulk Data” regulations, implementing Executive Order 14117. She has advised clients on the recent SEC Cybersecurity Disclosure Rules, including counseling on disclosure obligations for material cybersecurity incidents and developing annual SEC cybersecurity disclosures for publicly traded companies. Kaylee also counsels executives and boards of directors on cybersecurity and privacy corporate governance and risk management matters and regularly advises clients on the development of cybersecurity and privacy programs and compliance with other regulatory requirements and standards, such as the NYDFS Part 500 cybersecurity requirements, the FTC Safeguards Rule, the FTC Act, the California Consumer Privacy Act (CCPA) and state data privacy laws, the Illinois Biometric Information Privacy Act (BIPA), the Children’s Online Privacy Protection Act (COPPA), the Health Insurance Portability and Accountability Act (HIPAA), the Family Educational Rights and Privacy Act (FERPA), the Gramm-Leach-Bliley Act (GLBA), and the Payment Card Industry Data Security Standard (PCI DSS).</li><li>Corporate Transactions and Vendor Management: Kaylee counsels clients on vendor management programs, including developing security and privacy contracting frameworks and negotiating data protection agreements. Kaylee also advises clients on privacy and security diligence matters in connection with corporate transactions.</li></ul>Kaylee is an adjunct professor at Georgetown University Law Center, where she teaches a cybersecurity course. Kaylee is a Certified Information Privacy Professional (CIPP) through the International Association of Privacy Professionals. She previously served on the Center for a New American Security, Technology Policy Lab Working Group for Data Privacy and the Bar Association of the District of Columbia Board of Directors and National Security Steering Committee. She is also a member of Women in CyberSecurity (WiCyS).

Kaylee Bankston

Joshua R. Fattal is an associate in Morrison Foerster’s Data, Cyber + Privacy Group. He advises clients across industries on data protection best practices with a focus on emerging issues at the intersection of data privacy, security, and new technologies, including artificial intelligence (AI) and national security regulations pertaining to sensitive U.S. personal data.Joshua regularly counsels clients ranging from startups to multinational corporations on the legal implications of using AI and large language models (LLMs). He advises on compliance with global AI regulations, including the EU AI Act and Colorado AI Act, and provides guidance on AI governance, responsible AI use, and generative AI best practices.He also advises clients on compliance with U.S. laws governing the protection of sensitive data from adversary countries. He has assisted in clients’ complex due diligence of their data use and disclosure practices and in developing cross-functional compliance programs to meet evolving cross-border data transfer requirements.Joshua’s experience spans a variety of industries, including technology, life sciences, edtech, fintech, crypto, and consumer services. He counsels clients on compliance under local, state, and federal privacy regulations such as the California Consumer Privacy Act (CCPA), biometric and financial data privacy laws, and cybersecurity regulations. He also guides clients through compliance with international frameworks like the General Data Protection Regulation (GDPR), the EU-U.S. Data Privacy Framework, and the EU ePrivacy Directive.His practice encompasses data incident response strategies, including breach investigations and regulatory notifications. He also conducts privacy and cybersecurity due diligence for corporate transactions and advises on information security policies, cybersecurity governance, vendor risk management, and privacy-by-design product development.Joshua maintains an active pro bono practice. He has successfully secured asylum for multiple clients, including a Cameroonian political activist and a Honduran survivor of gender-based violence. He has also represented tenants in housing litigation and advised nonprofits on privacy and cybersecurity matters.Joshua earned his J.D. from NYU School of Law, where he graduated cum laude, was a Robert McKay Scholar, and received the full tuition ASPIRE Cybersecurity Scholarship. He received his B.A., magna cum laude, from Columbia University and is a member of Phi Beta Kappa. He previously served in the U.S. Intelligence Community, including as an attorney advisor in the Intelligence Law Division at the U.S. Department of Homeland Security. He also clerked for the Honorable Sarah Netburn, U.S. Magistrate Judge in the Southern District of New York.

Joshua Fattal

Associate

Ed Chang is a partner in our Los Angeles office.Ed represents institutional clients in all aspects of complex litigation, with an emphasis on high-stakes consumer and commercial litigation. His focus includes unfair competition, deceptive practices, cybersecurity and privacy class actions. Ed also advises major corporations on complex cybersecurity incidents, including data breaches and ransomware attacks, and is frequently acknowledged as a leading cyber law practitioner in the United States.Ed has acted as lead counsel in numerous class and mass actions, arbitrations, government investigations, and other high-profile litigation matters. He also regularly provides strategic counsel on sensitive cybersecurity and privacy issues, advising executive leadership and boards of directors on mergers and acquisitions, public relations, and crisis management.Ed has been named a Top 500 Leading Global Cyber Lawyer by Lawdragon magazine in 2024, 2025, and 2026, as well as a Top Cyber Lawyer by the Daily Journal and a National Cybersecurity & Privacy Rising Star by Law360 and LexisNexis. <h4>Recent Representative Matters </h4><ul><li>Currently representing clients in a broad array of individual and nationwide consumer class/mass actions, arbitrations, and ongoing government investigations.</li><li>Currently representing a specialty retailer in a highly publicized unfair competition dispute brought by a leading competitor.</li><li>Secured complete dismissals of over 500 mass arbitration claims brought against a prominent specialty retailer.</li><li>Achieved full dismissals in multiple MDL privacy class and representative actions involving major vehicle original equipment manufacturers.</li><li>Defended a national fast-food chain in a data breach class action and reached a favorable individual settlement after three years of protracted litigation.</li><li>Represented an online retailer in a nationwide technology class action and successfully precluded all class claims.</li><li>Acted for a leading homebuilder in several nationwide product defect class actions and defeated class certification.</li><li>Defended a medical device manufacturer in multiple class actions and successfully foreclosed the class claims.</li><li>Represented an information services provider in class litigation alleging deceptive marketing and obtained complete dismissals.</li><li>Secured a favorable appellate published opinion for a telecommunications company in a bellwether class action.</li></ul><h4>Speaking Engagements</h4><ul><li>“Recent Privacy & Cybersecurity Trends in Litigation and Regulatory Investigations,” July 16, 2025.</li><li>“Joint Defense/Common Interest: Navigating Attorney-Client and Work-Product Privileges,” February 13, 2025.</li><li>“Dispute Resolution Strategies: A Comparison of Arbitration Versus Litigation,” September 30, 2024.</li><li>“Cybersecurity Update: Privilege in Data Breach Investigations and Beyond,” August 13, 2024.</li><li>“CISO Liability: Personal and Professional Responsibility,” October 28, 2022.</li><li>“Cybersecurity and the Lawyer’s Role During a Cybersecurity Incident,” Fall 2022 Product Liability Advisory Counsel (<a href="https://www.linkedin.com/company/product-liability-advisory-council-inc-/" target="_blank">PLAC</a>) Annual Conference, October 20, 2022.</li><li>“Cybersecurity and Privacy Hot Topics: Global Legal Update for In-House Lawyers,” October 25, 2021.</li><li>“Cybersecurity & Privacy Recent Trends and Updates,” American Automobile Association Nationwide Litigation Summit, October 5, 2021.</li><li>“Cybersecurity & Privacy Update: Roundtable Discussion of Key Litigation, Mass Arbitration and Other Developments in 2021,” September 29, 2021.</li><li>“Diversity: Panel Discussion on National Current Events and Inclusion & Advancement,” August 25, 2021.</li></ul>