Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Home | BakerHostetler

BakerHostetler Records Significant Win for Summit Tool Company (Ken-Tool)

Gregory Dillard Speaks on Labor and Employment Law at Houston Bar Association Presentation

What Employers Should Know About New York’s Wage Payment Integrity Act

ADventures in Law

FTC’s Genesis Tech Complaint Signals More Than Another ROSCA Case

BakerHostetler’s dedicated privacy lawyers and innovative technologists work closely with their colleagues across the Digital Assets and Data Management Practice Group to address the myriad privacy and data protection risks facing our clients. Drawing on our extensive experience in privacy counseling, we have identified the following key enterprise privacy and data protection compliance priorities:

core/paragraph

<p>BakerHostetler’s dedicated privacy lawyers and innovative technologists work closely with their colleagues across the Digital Assets and Data Management Practice Group to address the myriad privacy and data protection risks facing our clients. Drawing on our extensive experience in privacy counseling, we have identified the following key enterprise privacy and data protection compliance priorities:</p>

Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies are likely to overlook compliance obligations, miss valuable opportunities to capitalize on data, or both. Noncompliance can result in hefty fines or litigation costs, but not knowing your data also reduces efficiency, hinders new technology implementation and erodes the trust of customers and business partners.

core/list-item

List Item

<li>Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies are likely to overlook compliance obligations, miss valuable opportunities to capitalize on data, or both. Noncompliance can result in hefty fines or litigation costs, but not knowing your data also reduces efficiency, hinders new technology implementation and erodes the trust of customers and business partners.</li>

core/list

<ul class="wp-block-list"><li>Knowing your data drives everything. From managing legal compliance obligations to leveraging AI tools effectively, businesses must understand how they collect, use, store and share personal data to make informed decisions. Without this knowledge, companies are likely to overlook compliance obligations, miss valuable opportunities to capitalize on data, or both. Noncompliance can result in hefty fines or litigation costs, but not knowing your data also reduces efficiency, hinders new technology implementation and erodes the trust of customers and business partners.</li></ul>

An organized collection of items displayed in a specific order.

List


<ul class="wp-block-list">
<li>Public awareness raises privacy risks. The average consumer is increasingly privacy aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity and transparency. Plaintiffs’ attorneys dissect public-facing statements to exploit errors and potential inaccuracies under novel theories of older laws. Generic language and template privacy notices no longer work.</li>



<li>Websites, apps, ad tech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Starting with sound data collection practices and tracking technology diligence across business teams saves time, resources and headaches in the long term. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices are essential.</li>



<li>Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to recent regulatory inquiries. Companies must account for current and future data uses by the enterprise and others, implement effective contracting and vendor management processes, and make proper disclosures to consumers. Failure to do so can trigger regulatory scrutiny and hamstring intended uses of personal data, potentially disrupting planned business partnerships or data-reliant deals.</li>



<li>Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data-minimization obligations, impact assessments and use restrictions. When deciding whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens.</li>
</ul>


Public awareness raises privacy risks. The average consumer is increasingly privacy aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity and transparency. Plaintiffs’ attorneys dissect public-facing statements to exploit errors and potential inaccuracies under novel theories of older laws. Generic language and template privacy notices no longer work.

<li>Public awareness raises privacy risks. The average consumer is increasingly privacy aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity and transparency. Plaintiffs’ attorneys dissect public-facing statements to exploit errors and potential inaccuracies under novel theories of older laws. Generic language and template privacy notices no longer work.</li>

Websites, apps, ad tech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Starting with sound data collection practices and tracking technology diligence across business teams saves time, resources and headaches in the long term. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices are essential.

<li>Websites, apps, ad tech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Starting with sound data collection practices and tracking technology diligence across business teams saves time, resources and headaches in the long term. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices are essential.</li>

Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to recent regulatory inquiries. Companies must account for current and future data uses by the enterprise and others, implement effective contracting and vendor management processes, and make proper disclosures to consumers. Failure to do so can trigger regulatory scrutiny and hamstring intended uses of personal data, potentially disrupting planned business partnerships or data-reliant deals.

<li>Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to recent regulatory inquiries. Companies must account for current and future data uses by the enterprise and others, implement effective contracting and vendor management processes, and make proper disclosures to consumers. Failure to do so can trigger regulatory scrutiny and hamstring intended uses of personal data, potentially disrupting planned business partnerships or data-reliant deals.</li>

Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data-minimization obligations, impact assessments and use restrictions. When deciding whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens.

<li>Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data-minimization obligations, impact assessments and use restrictions. When deciding whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens.</li>

<ul class="wp-block-list"><li>Public awareness raises privacy risks. The average consumer is increasingly privacy aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity and transparency. Plaintiffs’ attorneys dissect public-facing statements to exploit errors and potential inaccuracies under novel theories of older laws. Generic language and template privacy notices no longer work.</li><li>Websites, apps, ad tech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Starting with sound data collection practices and tracking technology diligence across business teams saves time, resources and headaches in the long term. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices are essential.</li><li>Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to recent regulatory inquiries. Companies must account for current and future data uses by the enterprise and others, implement effective contracting and vendor management processes, and make proper disclosures to consumers. Failure to do so can trigger regulatory scrutiny and hamstring intended uses of personal data, potentially disrupting planned business partnerships or data-reliant deals.</li><li>Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data-minimization obligations, impact assessments and use restrictions. When deciding whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens.</li></ul>

Introduce new sections and organize content to help visitors (and search engines) understand the structure of your content.

core/heading

Heading

heading

Heading that resizes to fit its container.

stretchy-heading

Stretchy Heading


<h2 class="wp-block-heading" id="h-why-bakerhostetler">Why BakerHostetler?</h2>


BakerHostetler’s Chambers-ranked Digital Assets and Data Management Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our privacy attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology, and telecommunications. We also routinely help small and midsized clients. We are adept at scoping privacy projects to meet client expectations and needs. The depth of our knowledge and breadth of our experience are unmatched, allowing us to deftly guide clients on all aspects of U.S. and global privacy and data protection risk.

Start with the basic building block of all narrative.

In a village of La Mancha, the name of which I have no desire to call to mind, there lived not long since one of those gentlemen that keep a lance in the lance-rack, an old buckler, a lean hack, and a greyhound for coursing.

Paragraph

paragraph

Paragraph that resizes to fit its container.

stretchy-paragraph

Stretchy Paragraph

<p>BakerHostetler’s Chambers-ranked Digital Assets and Data Management Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our privacy attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology, and telecommunications. We also routinely help small and midsized clients. We are adept at scoping privacy projects to meet client expectations and needs. The depth of our knowledge and breadth of our experience are unmatched, allowing us to deftly guide clients on all aspects of U.S. and global privacy and data protection risk.</p>

In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of the <em>Financial Times’</em> Top 25 Most Innovative Law Firms in North America for three consecutive years, and we are proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.

<p>In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of the <em>Financial Times’</em> Top 25 Most Innovative Law Firms in North America for three consecutive years, and we are proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.</p>


<h2 class="wp-block-heading" id="h-how-we-help-clients">How We Help Clients</h2>


Companies use data to evaluate business performance, improve decision making, enhance customer and market insights, and create efficiencies. Data also underpins technologies and generates new revenue streams. We help businesses derive value from personal data in compliance with privacy and data protection laws in the U.S. and globally. Our goal is to provide clients with expert, business-oriented privacy advice so they can concentrate on their primary business activities with confidence.

<p>Companies use data to evaluate business performance, improve decision making, enhance customer and market insights, and create efficiencies. Data also underpins technologies and generates new revenue streams. We help businesses derive value from personal data in compliance with privacy and data protection laws in the U.S. and globally. Our goal is to provide clients with expert, business-oriented privacy advice so they can concentrate on their primary business activities with confidence.</p>

Our attorneys provide privacy compliance counseling, design data protection programs, develop risk mitigation strategies, handle consumer and regulatory inquiries, and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting privacy and data protection challenges. Clients value our expertise, practical advice and cost-conscious guidance when it comes to achieving their compliance goals.

<p>Our attorneys provide privacy compliance counseling, design data protection programs, develop risk mitigation strategies, handle consumer and regulatory inquiries, and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting privacy and data protection challenges. Clients value our expertise, practical advice and cost-conscious guidance when it comes to achieving their compliance goals.</p>

contentpilot/expand-more

<section class="wp-block-contentpilot-expand-more"><div class="wp-block-contentpilot-expand-more__excerpt is-visible" data-selector="expand-more"><p></p></div><div class="wp-block-contentpilot-expand-more__full-content" data-selector="expand-more"><ul class="wp-block-list"><li>Public awareness raises privacy risks. The average consumer is increasingly privacy aware, savvy about brand reputation and more inclined to exercise privacy rights and escalate perceived privacy violations. Regulators take consumer complaints seriously and are also independently investigating companies’ privacy representations, calling for specificity and transparency. Plaintiffs’ attorneys dissect public-facing statements to exploit errors and potential inaccuracies under novel theories of older laws. Generic language and template privacy notices no longer work.</li><li>Websites, apps, ad tech and texting add value – and headaches. Consumer-facing companies have troves of data at their disposal, as well as an array of new ways to acquire and leverage it for marketing and consumer interaction. At the same time, the expanding deck of privacy laws, near daily headlines about privacy-invasive technologies and deceptive design choices, and an active plaintiffs’ bar have shifted the risk calculus. Starting with sound data collection practices and tracking technology diligence across business teams saves time, resources and headaches in the long term. Clear disclosures, appropriate consent protocols and meaningful, well-executed privacy choices are essential.</li><li>Data sharing must be managed effectively. Regulatory attention to data flows has intensified, with data processing agreements, cross-border transfers and data brokers all subject to recent regulatory inquiries. Companies must account for current and future data uses by the enterprise and others, implement effective contracting and vendor management processes, and make proper disclosures to consumers. Failure to do so can trigger regulatory scrutiny and hamstring intended uses of personal data, potentially disrupting planned business partnerships or data-reliant deals.</li><li>Sensitive data processing is a high-risk business practice. Recent legislation and regulatory focus have concentrated on data commonly regarded as highly sensitive. This primarily includes data related to health, children and geolocation as well as genetics, biometrics and other “omics” data. Sensitive data often requires special handling procedures, such as heightened security measures, explicit consumer consents, data-minimization obligations, impact assessments and use restrictions. When deciding whether and how to collect, use and store sensitive data, the data’s value for the business must be carefully weighed against associated risks and compliance burdens.</li></ul><h2 class="wp-block-heading" id="h-why-bakerhostetler">Why BakerHostetler?</h2><p>BakerHostetler’s Chambers-ranked Digital Assets and Data Management Practice Group works collaboratively with clients to manage their data seamlessly throughout the data life cycle. Our privacy attorneys tackle complex data issues every day. We serve some of the largest names in education, energy, entertainment, financial services, healthcare, hospitality, manufacturing, media, retail, technology, and telecommunications. We also routinely help small and midsized clients. We are adept at scoping privacy projects to meet client expectations and needs. The depth of our knowledge and breadth of our experience are unmatched, allowing us to deftly guide clients on all aspects of U.S. and global privacy and data protection risk.</p><p>In addition, BakerHostetler’s commitment to innovation has earned us recognition as one of the <em>Financial Times’</em> Top 25 Most Innovative Law Firms in North America for three consecutive years, and we are proud to be named a BTI Innovation Influencer in 2025. BakerHostetler is one of the few firms recognized across all four categories – legal strategy, client-facing innovation, tech-savvy delivery and generative AI integration.</p><h2 class="wp-block-heading" id="h-how-we-help-clients">How We Help Clients</h2><p>Companies use data to evaluate business performance, improve decision making, enhance customer and market insights, and create efficiencies. Data also underpins technologies and generates new revenue streams. We help businesses derive value from personal data in compliance with privacy and data protection laws in the U.S. and globally. Our goal is to provide clients with expert, business-oriented privacy advice so they can concentrate on their primary business activities with confidence.</p><p>Our attorneys provide privacy compliance counseling, design data protection programs, develop risk mitigation strategies, handle consumer and regulatory inquiries, and defend against litigation. Leveraging existing business practices and internal processes, we take a pragmatic, holistic and results-oriented approach to meeting privacy and data protection challenges. Clients value our expertise, practical advice and cost-conscious guidance when it comes to achieving their compliance goals.</p></div><button class="wp-block-contentpilot-expand-more__more-button is-visible" data-selector="expand-more">View More</button><button class="wp-block-contentpilot-expand-more__less-button" data-selector="expand-more">View Less</button></section>

Data Counsel

Strategic Privacy Risk Management

Insights and News

Featured Insights

Related Services

Insights and News

Featured Insights