DLA Piper LLP (US) is widely regarded for its depth of expertise across the full spectrum of global data privacy compliance, from privacy litigation and enforcement to due diligence and compliance programs, regularly advising its well-established multinational client base. The team is also well-versed in handling complex data breaches and cyber incident response. Andrew Serwin leads the practice from the San Diego office, advising clients on data governance, cyber breaches, and risk management in the online video game, AI, and software sectors. Miami-based Carol Umhoefer is the name to note for multinational privacy assessments and compliance programmes, specifically for the deployment of blockchain, AI, and machine learning. In Seattle, Kate Lucente has a particular focus on the technology, automotive, and financial services industry, providing advertising, AI and biometrics global compliance, data strategy and incident response advice. Ronald Plesco based in Philadelphia, is a seasoned security and privacy lawyer and well-versed in threat intelligence, cyber investigations, and AI matters. Hayley Curry in Dallas is equipped to assist with high-profile cyber incident response, national security, and intelligence issues.
Legal 500 Editorial commentary

Accolades

Client satisfaction: Lawyer & team quality
Client satisfaction: Billing & efficiency

Testimonials

Collated independently by Legal 500 research team.

  • ‘DLA Piper's extensive and tightly coordinated global attorney network enables the firm to respond promptly to clients’ various needs in most jurisdictions.’
  • ‘My experience has been primarily working with Carol Umhoefer, and what stands out is her ability to combine deep expertise in cyber law, data privacy, and data protection with a practical understanding of how these issues operate within a business environment. Her advice is consistently pragmatic, risk-based, and tailored to the company’s operational realities rather than abstract legal theory.'
  • ‘We work regularly with Ron Plesco. His deep technical knowledge, market insight and connections in the cybersecurity space are simply exceptional.’
  • ‘I’ve been working closely with Carol Umhoefer and Katie Lee. Both are highly knowledgeable and take the time to truly understand clients’ business needs, partnering with clients to develop pragmatic and effective compliance solutions. I am particularly impressed by Carol’s deep expertise in global privacy and data‑related regulations, as well as Katie’s exceptional organizational skills in managing multiple complex issues simultaneously during our M&A matters.'
  • 'Carol Umhoefer excels at translating complex and evolving regulatory requirements into clear, actionable guidance. She helps internal teams understand not only what is required, but also how to implement solutions in a way that supports business objectives and timelines.'
  • 'Carol Umhoefer distinguishes herself through her responsiveness, clarity of communication, and sound judgment. She approaches matters collaboratively and functions as a trusted partner rather than external counsel providing one-off advice.'
  • 'Carol Umhoefer demonstrates flexibility in how she engages, adapts quickly to emerging issues, and collaborates effectively across disciplines when matters extend beyond pure privacy or cyber law. ’
  • ‘Carol Umhoefer stands out as an exceptional advisor. She provides high-quality, practical guidance and serves as a clear and reliable point of contact. Her ability to understand the business context and deliver focused, actionable advice makes engagements efficient and effective.

  • 'Carol Umhoefer adds significant value, and having her as the main point of contact helps streamline communication and decision-making. She is someone I trust and would readily recommend.’
  • ‘Incredibly responsive and well connected team. Excellent responsiveness during incident response. Rare ability to communicate effectively from the board level all the way down to the technical or software product engineering level. Regularly able to escalate matters with key third parties based on longstanding relationships in the space.’

Key clients

  • CrowdStrike, Inc.
  • Progress Software Corporation
  • OpenAI
  • Dropbox, Inc.
  • Visa International, Inc.
  • The 3M Company
  • Eli Lilly & Company

Work highlights

Represented CrowdStrike in response to an outage in July 2024 that affected roughly 8.5 million systems.
Modernized Eli Lilly and Company’s global privacy program to mitigate regulatory, class action, and resiliency risk.
Advised Progress Software in connection with its MOVEit software and alleged potential cyber incidents.

Lawyers

Hall of Fame

The lawyers at the very top of the profession, widely known and respected by peers and clients for their longstanding involvement in market-leading work.

Leading partners

The strongest partners in their field, leading on market-leading deals and endorsed by peers and clients alike.

Leading associates

Leading associates with regular involvement in their team's key work, and recognition from peers or clients as being ones to watch.

Practice head

Andrew Serwin

Other key lawyers

Carol Umhoefer; Kate Lucente; Ronald Plesco; Hayley Curry; Katie Lee