Paul Pittman Bio

Paul Pittman specializes in data privacy and cybersecurity, providing strategic legal and business advice for a variety of commercial and financial clients. As a partner in the Data, Privacy & Cybersecurity Practice, Paul represents clients in the financial, consumer and technology space on a multitude of privacy and security issues that arise in the collection and processing of consumer and business data, and the management of information and operational systems under state, federal and international laws and standards. Paul advises his clients on compliance with data privacy and cybersecurity laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the New York Department of Financial Services Cybersecurity Regulation, the Health Insurance Portability and Accountability Act (HIPAA), the Telephone Consumer Protection Act (TCPA), the Children’s Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR). His practice also includes guiding companies in responding to security incidents and data breaches by managing internal forensic investigations, addressing legal obligations and engaging with regulators. Paul collaborates with clients to identify data privacy and security issues that may arise in their business operations and products, including connected devices (IoT) and FinTech, and assists them with the development of compliant data privacy and cybersecurity programs. In addition, he counsels clients on the permissible handling of data consistent with online and mobile data privacy and security standards. Paul also advises global clients on all data privacy and cybersecurity matters that arise in corporate transactions, including mergers, acquisitions, financings and securities offerings. Paul offers his clients extensive experience defending against complex commercial and state attorney general litigation. Paul has represented Global Fortune 10 companies and other entities in diverse actions, including privacy, digital media, intellectual property, and product liability actions, in state and federal courts. A knowledgeable and engaged advocate, Paul works to understand his client’s business and develops creative strategies to protect client interests and minimize risks. Clients benefit from Paul’s ability to apply his technical understanding to overcome challenges associated with implementing compliant privacy and security processes while reducing potential legal exposure. He is a Certified Information Privacy Professional (CIPP/US) and a member of the International Association of Privacy Professionals (IAPP).