Orrick, Herrington & Sutcliffe

Orrick, Herrington & Sutcliffe regularly acts for domestic and multinational hospitality, consumer, and technology companies on cyber threat incident response, privacy, and adtech compliance matters. The firm is also equipped to handle class action cases involving wiretapping and user data, including PII, PCI, and BIPA. Shannon Yavorsky heads the practice from San Francisco, advising public and private life sciences, health, and technology companies with global privacy, cybersecurity, and AI regulatory issues. Both based in Seattle, Aravind Swaminathan is equipped to handle cybersecurity incidents, litigation, and enforcement, while Joseph Santiesteban is well-versed in incident preparedness and security risk mitigation. Based in Washington DC, Thora Johnson provides expertise on all aspects of health data, including compliance programs, as well as privacy and security incident response for medical device, pharmaceutical, and biotechnology companies. Also in Washington DC, Emily Tabatabai assists clients in the retail, gaming, and social media sectors with FTC and State Attorneys General regulatory investigations. Rebecca Harlow is based in San Francisco and is noted for class action litigation involving privacy and data security breaches, wiretapping, and data loss.