John Fitzsimmons

Education

• LMU Loyola Law School
• New York University

John is an associate in the New York office and focuses his practices on privacy litigation and incident response. John represents clients in various cyber and privacy litigation, addressing issues surrounding class action defenses for data breaches in healthcare and other sectors, and online tracking. He also litigates matters involving defamation and invasion of privacy.

John’s incident response practice focuses on managing and mitigating the legal aspects of cybersecurity incidents, including ransomware attacks, business email compromises and employee-related events. He works closely with IT and security teams, forensic specialists, insurers and other internal and external stakeholders to reduce the effects and expenses related to cyber incidents. He also advises clients on compliance with state and federal breach notification rules and regulations, including NAIC Insurance Data Security Model Law, GLBA, CCPA/CPRA, NYDFS, and HIPAA.