Overview
Aaron advises clients on a broad range of complex global privacy, data protection and cybersecurity matters, including with respect to existing and emerging requirements in the US and EU. As a leader on the firm’s global privacy team, Aaron’s work includes advising clients on large-scale cybersecurity incidents; conducting diligence and negotiating privacy and data security aspects of corporate transactions; developing of cross-border data transfer solutions; developing local, regional and international privacy and data protection compliance programs with existing and emerging data protection requirements in Europe and the US; and negotiating data-driven commercial agreements.
Aaron is well known as a top privacy professional and has been recognized by Chambers and Partners, The Legal 500 and Computerworld for his work on behalf of clients. Aaron splits his time between the firm’s New York and London offices, and is the only lawyer currently listed in both The Legal 500 United Kingdom and The Legal 500 United States guides, providing clients with a broad and unique transatlantic perspective. He is a sought-after media resource on privacy issues and has been quoted in such publications as Time Magazine, Bloomberg BNA, Businessweek Magazine, Computer Weekly, Corporate Secretary, DataGuidance, Law360, SC Magazine and The Times. Aaron regularly speaks before industry groups, legal organizations, government agencies and educational institutions at conferences, seminars, roundtables and webinars. He has written and co-written numerous articles, book chapters and handbooks on privacy and information security issues.
Experience
- Advises clients with due diligence and negotiation of privacy and data security issues in corporate transactions.
- Advises clients on compliance with the California Consumer Privacy Act of 2018 (CCPA), including conducting due diligence, preparing gap analyses, developing remediation plans, and undertaking compliance projects.
- Advises clients on all legal issues associated with cybersecurity events pursuant to requirements imposed by laws and regulatory guidance in the European Union and the United States.
- Prepares proactive, data breach-readiness solutions for clients, including through the creation of incident response plans and conducting board-level tabletop exercises.
- Advises clients on international data protection requirements, including the EU General Data Protection Regulation and developing mechanisms to comply with cross-border data transfer requirements (such as through BCRs, the Privacy Shield and Standard Contractual Clauses).
Accolades
Honors & Recognitions
-
Listed for Risk Advisory: Data Protection, Privacy and Cybersecurity, Legal 500 UK, 2017-2025
- Recognized as a Leading Lawyer for Cyber Law (including Data Privacy and Data Protection) (2019-2024) and as a Recommended Lawyer (2016-2018), Legal 500 United States
- Recognized as a Leader in Privacy & Data Security, USA-Nationwide, Chambers USA, 2020-2024
- Named a “Client Service All‐Star” by BTI, 2022
-
Recognized as a Leader in Privacy & Data Security, USA, Chambers Global, 2021-2024
- Recognized as a Recognized Practitioner in Data Protection and Information Law, UK-wide, Chambers UK, 2019-2020
- Recommended for FinTech, Legal 500 United States, 2019
- Recognized as a Leader for Data: Information Technology, Who’s Who Legal, 2019-2020, and for Telecommunications, Media and Technology Law, Who’s Who Legal, 2013-2021
- Selected as a Super Lawyer for Technology Transactions, New York Super Lawyers magazine, 2015. Also selected as a Rising Star, 2011-2014.
- Recognized as Up and Coming in Privacy & Data Security, National, Chambers USA, 2013
- Named among the Best Privacy Advisers, Computerworld magazine, 2008
Affiliations
Professional
- Member, Section of Antitrust Law–Privacy and Information Security Committee, American Bar Association
- Member, Association of the Bar of the City of New York
- Former Member, Board of Editors, Pratt’s Privacy & Cybersecurity Law Report
- Former Member, Information Technology Law Committee, Association of the Bar of the City of New York
Insights
Legal Updates
- 13 Minute ReadJuly 18, 2024Legal Update
- 22 Minute ReadAugust 3, 2023Legal Update
- 5 Minute ReadJuly 18, 2023Legal Update
- 3 Minute ReadJune 15, 2023Legal Update
- 11 Minute ReadMay 23, 2022Legal Update
- 2 Minute ReadNovember 18, 2021Legal Update
- 14 Minute ReadOctober 8, 2021Legal Update
- 5 Minute ReadSeptember 24, 2021Legal Update
- 1 Minute ReadMay 5, 2020Legal Update
- 2 Minute ReadMarch 20, 2020Legal Update
- January 13, 2020Legal Update
- November 12, 2019Legal Update
- February 26, 2018Legal Update
- 1 Minute ReadJune 15, 2016Legal Update
- April 14, 2016Legal Update
- March 09, 2016Legal Update
- June 17, 2015Legal UpdateCouncil of the European Union Agrees on General Approach to the Proposed General Data Protection Regulation
- April 24, 2015Legal Update
- June 23, 2014Legal Update
- September 23, 2013Legal Update
- March 29, 2013Legal Update
- March 28, 2013Legal Update
- February 28, 2013Legal Update
- February 14, 2013Legal Update
- February 13, 2013Legal Update
- January 25, 2013Legal Update
- October 5, 2012Legal Update
- June 22, 2011Legal Update
- February 2, 2009Legal Update
- December 9, 2008Legal Update
- May 29, 2008Legal Update
Events & Speaking Engagements
- November 7, 2024EventPanelistNew Age of Payment Fraud: Hackers vs. Heroes, Cybersecurity Summit NY: Financial Services
- November 6, 2024EventPanelistCybersecurity: U.S. and Global Legal Landscape, Practicing Law Institute’s Cybersecurity 2024: Managing Cybersecurity Incidents
- September 26, 2024EventSpeakerCyber Attack Tabletop, Global Privacy Assembly Dialogues
- September 23, 2024EventSpeakerCybersecurity: U.S. and Global Legal Landscape, Practicing Law Institute’s Cybersecurity 2024: Managing Cybersecurity Incidents
- May 20, 2024EventSpeakerBeyond Comprehensive State Laws – What’s Happening in Privacy and Data Security Law in the Rest of the US?, PLI’s Twenty-Fifth Annual Institute on Privacy and Cybersecurity Law
- December 1, 2023EventSpeakerThe Shifting Sands of Data Protection: 2023 Year in Review, Conférence Annuelle Du Cercle De La Compliance 2023
- November 16, 2023Event
- May 22, 2023EventSpeakerBeyond the Comprehensive State Privacy Laws – What’s Happening in Privacy and Data Security Law in the Rest of the US?, Practicing Law Institute’s Twenty-Fourth Annual Institute on Privacy and Cybersecurity Law
- March 2, 2023EventSpeakerFrom Safe Harbor to Privacy Shield to the Trans-Atlantic Data Privacy Framework: The Saga Continues, Hunton Andrews Kurth Webinar
- January 25, 2023EventPanelistGlobal Data Transfer Update, World Data Protection Day, BNP Paribas
- December 2, 2022EventSpeakerThe Shifting Sands of Data Protection: 2022 Year in Review, Le Cercle de la Compliance’s 10th Compliance Year in Review
- September 30, 2022EventSpeakerCybersecurity: US and Global Legal Landscape, Practicing Law Institute: Cybersecurity 2022: Managing Cybersecurity Incidents
- January 26, 2022EventSpeakerA Roundup of 2021 Global Data Privacy Developments and A Look at What’s Coming in 2022, New York State Bar Association’s 2022 Annual Meeting – International Section
- September 30, 2021EventSpeakerCybersecurity: U.S. and Global Legal Landscape, Practising Law Institute: Cybersecurity 2021: Managing Cybersecurity Incidents
- April 22, 2021Event
- March 30, 2021Event
- November 23, 2020Event
- November 19, 2020Event
- November 5, 2020Event
- August 17, 2020EventPanelistOther New US Privacy and Data Security Rules, Practicing Law Institute’s Twenty-First Annual Institute on Privacy and Cybersecurity Law
- July 23, 2020Event
- January 9, 2020Event
- November 25, 2019EventLecturerCalifornia Consumer Privacy Act of 2018: Overview and Path to Compliance, Benjamin N. Cardozo School of Law
- November 15, 2019Event
- November 14, 2019EventSpeakerThe New Age of Privacy, Hunton GC Privacy and Data Security Event
- November 6, 2019EventSpeakerCCPA Amendments and Regulations – Managing the Changes, New York Privacy Officers’ Forum Leadership Series
- June 4, 2019Event
- May 20, 2019EventSpeakerTwentieth Annual Institute on Privacy and Data Security Law, PLI Webinar, New York
- May 17, 2019EventSpeakerLondon Breakfast Briefing - Data Breach: Prepare Your Business and Test Your Readiness, London
- March 13, 2019EventCo-presenterContracting Considerations Under the GDPR, PLI Webinar
- November 15, 2018EventSpeakerThe California Consumer Privacy Act: Impact and Implications, New York Privacy Officers’ Forum Breakfast Briefing
- September 26, 2018EventSpeakerClearing up the Cookie Chaos: Practical Approaches to Consent Under the e-Privacy Directive and GDPR
- September 21, 2018EventSpeakerGDPR Minutes: The Intersection Between e-Privacy and GDPR, American Bar Association’s Privacy and Information Security Section of Antitrust Law
- September 7, 2018Event
- June 5, 2018Event
- March 2018EventPresenterSEC Cybersecurity Guidance 2018, Hunton & Williams Webinar
- January 17, 2018Event
- December 5, 2017Event
- November 14, 2017Event
- October 5, 2017EventSpeakerThe Future of Data Protection Forum 2017, London, Thomson Reuters Practical Law
- June 2017Event
- June 22, 2017EventPresenterGDPR: Demystifying the Operational Requirements Webinar
- May 23, 2017EventSpeakerCISO Europe 14th Annual Conference and Roundtable, The Hague: Personal Data Breach Notification under the GDPR – Be Prepared!
- April 18, 2017EventSpeakerPrivacy Leaders Council: How to Prepare for the GDPR, Retail Industry Leaders Association
- March 21, 2017EventSpeakerCybersecurity Panel Discussion: A Live Cyber Attack Tabletop Exercise, Hunton & Williams Breakfast Briefing, London, UK
- March 15, 2017EventSpeakerUnderstanding the Impact of the GDPR on the EU's Cybersecurity Landscape, IAPP European Data Protection Intensive, London, UK
- March 14, 2017EventSpeakerGDPR Implementation: Strategic Issues to Address, CIPL, Hunton and AvePoint Breakfast Briefing, London, UK
- January 26, 2017EventSpeakerHow to Prepare for the EU General Data Protection Regulation, IFLR European In-House Counsel Summit 2017, London, UK
- January 18, 2017EventSpeakerNegotiating Cloud Contracts: Key Data Protection Considerations, Society for Computers and Law Foundations of IT Law Program
- November 15, 2016EventSpeakerProtecting Data in an Era of Hacks and Leaks, Offshore Alert Conference, London, UK
- October 14, 2016EventSpeakerCyber Security and Data Breach: Preparing for Mandatory Breach Reporting, PDP
- October 14, 2016EventSpeakerData Transfers: Devising a Practical Framework for Global Data Flows, PDP
- September 27, 2016EventSpeakerBrexit: What Will the Impact Be? “Impact of Brexit from a Data Privacy and Security Law Perspective,” City of London Corporation and TORI Global
- September 16, 2016EventSpeakerVendor Management, Retail Industry Leaders Association
- April 28, 2016EventSpeakerHunton & Williams Webinar: GDPR: Impact on Cross-Border Data Transfers (Part 2)
- April 12, 2016EventSpeakerYour Client is the Victim of a Cyber-Attack – How to Provide Value, Richmond Bar Association Business Law Section Spring CLE Program
- April 12, 2016EventSpeakerPLI’s EU-U.S. Privacy Shield: A How-To Guide
- March 9, 2016EventSpeakerHunton & Williams Webinar: GDPR: A How-To Guide (Part 1)
- September 25, 2015EventSpeakerU.S. and Global Policy Landscape, PLI’s Cybersecurity 2015: Managing the Risk
- June 23, 2015EventSpeakerLiving with Contracts – Software Audits and Privacy Compliance, Hunton & Williams LLP’s IT/Procurement Leadership Forum, New York
- June 17, 2015EventSpeakerInformation Risks & Trends Panel, CNA Cybersecurity Conference
- June 9, 2015Event
- June 9, 2015EventSpeakerPrivacy: Evolving Risks in Life Sciences, Pharmaceutical and Medical Device Compliance Conference
- June 8, 2015EventSpeakerThe Mobile Arena: An Evolving Landscape, PLI’s 16th Annual Institute on Privacy and Data Security Law
- March 19, 2015Event
- March 12, 2015EventSpeakerAnatomy of a Breach: From Discovery to Recovery, National Association of Attorneys General, Southern Region Meeting
- January 2015EventSpeakerPrivacy and Information Security Monthly Update, American Bar Association
- January 9, 2015EventSpeakerDecision Analytics Program: Data Privacy 2015, Virginia Commonwealth University
- November 13, 2014EventSpeakerCyber Security: A How-To Guide, International Accounting Operations Conference
- October 16, 2014EventSpeakerLaw Firm Cyber Risk Conference, Sandpiper Partners LLC
- June 16, 2014EventSpeakerThe Mobile Revolution: New Challenges for Privacy & Data Security, PLI 15th Annual Privacy & Data Security Law Institute
- June 3, 2014EventPanelistInfosecurity Magazine Summer Virtual Conference 2014
- May 19, 2014EventSpeakerCybersecurity: Proactively Protecting Your Company, Momentum Privacy, Policy & Technology Summit
- April 25, 2014EventSpeakerData Security Breaches: Understanding the Threat and Navigating the Legal Landscape, CPE Retail Accounting Conference
- June 20, 2013EventSpeakerU.S. Cybercrime 2013: Stark Realities, Sandpiper Partners LLC/PricewaterhouseCoopers LLP
- June 18, 2013EventSpeakerThe Digital Marketing Ecosystem: Trends, Risks, and Obligations, PLI 14th Annual Privacy & Data Security Law Institute
- April 23, 2013EventInformation Risk Management: Aligning Records, Privacy, Cyber & eDiscovery, ALM IRM Webcast
- November 28, 2012EventUS & UK Data Protection Law: Experts’ Views on Compliance Through Data Quality and Governance Webcast
- November 28, 2012EventU.S. Privacy and Data Security Requirements Webcast
- November 13, 2012EventSpeakerSecurity Breach & Privacy, Property Casual Insurers Association of America (PCI)
- June 5, 2012EventABA Privacy and Information Security Committee Monthly Update
- May 24, 2012Event
- December 9, 2011EventSpeakerPrivacy Legislative Update, New York Privacy Officers Forum
- October 26, 2011EventSpeakerOnline Behavioral Advertising: Emerging Legal Issues, ACI Social Media Business Technology and the Law, New York, NY
- September 13, 2011EventSpeakerData Privacy in a Global Era, CLE Program hosted by Dana Holding Corporation, Toledo, OH
- June 21, 2011EventSpeakerOnline Behavioral Advertising: Emerging Legal Issues, Twelfth Annual Institute on Privacy and Data Security Law (PLI), New York, NY
- June 9, 2011EventSpeakerPrivacy Issues in Immigration, American Council on International Personnel (ACIP) 37th Annual Symposium, Arlington, VA
- May 18, 2011EventSpeakerHot Topics in Privacy Law, New York City Bar Association
- April 11, 2011EventLecturerPrivacy and Information Security, Columbia University
- February 3, 2011EventSpeakerCloud Computing: Emerging Privacy and Information Security Considerations, New York Privacy Officers Forum (NYPOF)
- January 6, 2011EventSpeakerFTC Privacy Report Analysis: Protecting Consumer Privacy in an Era of Rapid Change, Association of Corporate Counsel
- December 6, 2010EventLecturerPrivacy and Information Security, Columbia University, New York, NY
- November 4, 2010EventSpeakerOnline Behavioral Advertising: Emerging Legal and Business Issues, New York Privacy Officers Forum
- October 7, 2010EventSpeakerABA’s Privacy Update Webinar
- September 28, 2010EventSpeakerA Practice Legal Guide to Doing Business on the Internet, New York City Bar
- September 8, 2010EventSpeakerPrivacy, Confidential Information and Intellectual Property, Ethics Compliance Officer Association Law School
- June 22, 2010EventSpeakerPrivacy Developments in the Workplace, Practising Law Institute, New York, NY
- June 11, 2010EventSpeakerImplications of the HITECH Act’s Breach Requirements, The Association for Healthcare Risk Management of New York, New York, NY
- May 7, 2010EventSpeakerMassachusetts Standards for the Protection of Personal Information: What Your Firm Needs to Know, VigiTrust Roundtable, New York, NY
- April 30, 2010EventPanelistCybersecurity Regulation, CFO Roundtable, Dallas, TX
- April 26, 2010EventLecturerPrivacy and Information Security, Columbia University, New York, NY
- April 22, 2010EventSpeakerData Privacy in a Global Era, AF&PA General Counsels Resource Committee, Jacksonville, FL
- March 17, 2010EventSpeakerThe Evolution of Federal and State Privacy Law and the Implication for CIOs, VigiTrust Roundtable, New York, NY
- February 11, 2010EventSpeakerData Security Breaches: The Growing Liability Threat, Crafting and Implementing Policies to Prevent and Respond to Inadvertent Disclosures Webinar, Strafford Publications
- January 11, 2010EventSpeakerPrivacy Issues in Marketing, InComm Partner Alliance 2010, Miami, FL
Publications
- Spring 2024Publication
- January 2023Publication
- December 7, 2022Publication
- October 5, 2022PublicationCo-authorData Protection & Privacy 2023, Introduction, Getting the Deal Through
- October 5, 2022Publication
- October 5, 2022Publication
- October 5, 2022Publication
- September 2022Publication
- August 31, 2022Publication
- June 7, 2022Publication
- March 15, 2022Publication
- January 2022Publication
- August 18, 2021Publication
- August 18, 2021Publication
- August 18, 2021Publication
- August 18, 2021Publication
- August 18, 2021Publication
- February 2021Publication
- November 4, 2020Publication
- November 4, 2020Publication
- November 4, 2020Publication
- November 4, 2020Publication
- November 4, 2020Publication
- September 21, 2020Publication
- February 2020Publication
- November 2019PublicationCo-authorInternational: EU-US cross-border data transfers, OneTrust DataGuidance
- October 1, 2019Publication
- October 1, 2019Publication
- October 1, 2019Publication
- October 1, 2019Publication
- October 1, 2019Publication
- October 1, 2019PublicationContributing Editor
- July 1, 2019Publication
- May-June, 2019Publication
- April 5, 2019Publication
- April 5, 2019Publication
- April 5, 2019Publication
- April 5, 2019Publication
- April 5, 2019Publication
- February 6, 2019Publication
- October 29, 2018Publication
- September 4, 2018Publication
- August 2018Publication
- November 2017Publication
- September 2017PublicationCo-authorData Protection & Privacy 2018, Safe Harbor and the Privacy Shield, United States, and United Kingdom Chapters, Getting the Deal Through
- July 2017PublicationCo-authorThe UK’s commitment to the GDPR, ITProPortal
- May 2017Publication
- March 2017PublicationAuthorUSA, The International Comparative Legal Guide to Data protection 2017
- September 2016PublicationCo-authorData Protection & Privacy 2017, Safe Harbor and the Privacy Shield and United States Chapters, Getting the Deal Through
- August 15, 2016Publication
- May 2016Publication
- April 2016Publication
- December 30, 2015Publication
- October 2015Publication
- September 2015Publication
- September 2015Publication
- May 2015PublicationCo-authorUSA Data Protection 2015, ICLG
- March 2015Publication
- February 2015PublicationCo-authorCybersecurity and Data Breach, Bloomberg BNA Privacy & Data Security Portfolio Series
- September 2014Publication
- September 2014Publication
- September 2013Publication
- February 20, 2013Publication
- January 24, 2013Publication
- July 2011Publication
- May 31, 2011Publication
- January 2011Publication
- July 2010PublicationContributing AuthorPrivacy and Data Security Law Deskbook, Aspen Publishers
- June 10, 2010PublicationCo-authorEmerging Privacy Issues in Bankruptcy, New York Law Journal
- November 11, 2009PublicationCo-authorPreservation and Monitoring of Corporate Messaging, New York Law Journal
- February 2009Publication
- 2008PublicationCo-authorEuropean Union Data Protection, Chapter 11 in West’s Data Security and Privacy Law: Combating Cyberthreats
- September 18, 2008Publication
- 2008PublicationCo-authorData Security Handbook, ABA Section of Antitrust Law, Data Security Handbook
News
- 3 Minute ReadOctober 4, 2024News
- August 29, 2024Media Mention
- 7 Minute ReadJune 12, 2024News
- 6 Minute ReadJune 6, 2024News
- 4 Minute ReadFebruary 15, 2024News
- 1 Minute ReadOctober 10, 2023News
- 7 Minute ReadJune 8, 2023News
- 6 Minute ReadJune 1, 2023News
- 4 Minute ReadFebruary 16, 2023News
- January 17, 2023Media Mention
- December 30, 2022Media Mention
- 1 Minute ReadOctober 8, 2022News
- October 7, 2022Media Mention
- October 7, 2022Media Mention
- October 7, 2022Media Mention
- 6 Minute ReadJune 9, 2022News
- 6 Minute ReadJune 1, 2022News
- 4 Minute ReadFebruary 18, 2022News
- 1 Minute ReadFebruary 8, 2022News
- 2 Minute ReadNovember 30, 2021News
- 1 Minute ReadOctober 1, 2021News
- 6 Minute ReadMay 25, 2021News
- March 15, 2021Media Mention
- March 9, 2021Media Mention
- 3 Minute ReadFebruary 18, 2021News
- December 30, 2020Media Mention
- October 30, 2020Media Mention
- 1 Minute ReadSeptember 30, 2020News
- 3 Minute ReadAugust 4, 2020News
- July 27, 2020Media Mention
- July 14, 2020Media Mention
- July 6, 2020Media Mention
- 6 Minute ReadJune 12, 2020News
- 5 Minute ReadApril 27, 2020News
- March 24, 2020Media Mention
- January 3, 2020Media Mention
- 1 Minute ReadOctober 15, 2019News
- 1 Minute ReadSeptember 27, 2019News
- 6 Minute ReadJune 6, 2019News
- 2 Minute ReadApril 3, 2019News
- 1 Minute ReadNovember 9. 2018News
- 1 Minute ReadOctober 30, 2018News
- 4 Minute ReadJune 13, 2018News
- 2 Minute ReadMarch 21, 2018News
- 4 Minute ReadMarch 14, 2018News
- 1 Minute ReadNovember 3, 2017News
- September 18, 2017Media Mention
- 2 Minute ReadJuly 14, 2017News
- June 15, 2017Media Mention
- 2 Minute ReadApril 12, 2017News
- 3 Minute ReadApril 10, 2017News
- 2 Minute ReadMarch 6, 2017News
- October 18, 2016Media Mention
- 1 Minute ReadNews
- 1 Minute ReadJuly 25, 2016News
- 1 Minute ReadFebruary 2, 2016News
- 2 Minute ReadNovember 10, 2015News
- 1 Minute ReadSeptember 4, 2015News
- 1 Minute ReadAugust 20, 2015News
- July 20, 2015News
- 2 Minute ReadJune 4, 2015News
- June 3, 2015News
- 2 Minute ReadJune 2, 2015News
- 1 Minute ReadMarch 5, 2015Media Mention
- 1 Minute ReadJanuary 15, 2015News
- 2 Minute ReadNovember 24, 2014News
- 1 Minute ReadJune 23, 2014News
- May 29, 2014News
- 1 Minute ReadMay 8, 2014News
- 2 Minute ReadApril 9, 2014News
- July 31, 2013Media Mention
- July 11, 2013Media Mention
- 2 Minute ReadJune 24, 2013News
- 2 Minute ReadJune 21, 2013News
- 2 Minute ReadMay 30, 2013News
- 3 Minute ReadJune 7, 2012News
- 1 Minute ReadAugust 1, 2011News
- June 15, 2011News
- 1 Minute ReadMay 12, 2011Media Mention
- July 13, 2010News
- 4 Minute ReadApril 8, 2010News
- June 26, 2009News
- 4 Minute ReadNovember 17, 2008News
JD, University of Virginia School of Law, 2002
BA, The University of Texas, High Honors, 1997
England and Wales (Registered Foreign Lawyer)
New York
Areas of Focus
Additional Service Areas
Privacy and information security, once overlooked in many corporate transactions, are now taking center stage.