Profile

Education

  • LMU Loyola Law School
  • New York University

John is an associate in the New York office and focuses his practices on privacy litigation and incident response. John represents clients in various cyber and privacy litigation, addressing issues surrounding class action defenses for data breaches in healthcare and other sectors, and online tracking. He also litigates matters involving defamation and invasion of privacy.

John’s incident response practice focuses on managing and mitigating the legal aspects of cybersecurity incidents, including ransomware attacks, business email compromises and employee-related events. He works closely with IT and security teams, forensic specialists, insurers and other internal and external stakeholders to reduce the effects and expenses related to cyber incidents. He also advises clients on compliance with state and federal breach notification rules and regulations, including NAIC Insurance Data Security Model Law, GLBA, CCPA/CPRA, NYDFS, and HIPAA.

Qualifications and admissions

  • New York

Work highlights

LITIGATION

  • Worked with team to secure early dismissal of data breach class action Colorado federal court.
  • Representation of public municipality in defense of data breach class action.

INCIDENT RESPONSE AND PRIVACY

  • Advised prominent healthcare institution regarding compliance relevant state and federal law data breach notification laws following a cyber incident.

Presentations and publications

  • Co-author, “5 ways to reduce legal risk with privacy policies,” published for Risk Management (December 2023)