Mike’s practice focuses on privacy and cybersecurity issues. Mike advises clients on a diverse range of global privacy and information security issues. A significant focus of his practice is assisting a variety of clients, from multinational companies to startups, with evaluating and managing privacy and cybersecurity risks and policy issues. Much of his work has centered on navigating complex privacy and cybersecurity issues on behalf of companies in the financial services industry as well as companies engaged in cutting-edge technologies and information practices, such as AI/machine learning, biometrics, geolocation tracking, and Internet of Things (IoT) devices.

Mike has extensive experience advising clients on compliance with federal, state and international privacy and data security laws. He also regularly assists companies with building and implementing their privacy and information security programs and addressing related governance issues, including developing written policies and procedures; designing incident response programs and conducting breach response preparedness activities; developing cross-border data transfer solutions; preparing data protection impact assessments; and developing and enhancing vendor management programs. He also regularly assists clients with negotiating and drafting privacy and data security terms in commercial contracts and M&A transactions.

Mike’s practice also focuses significantly on helping clients manage large-scale cybersecurity incidents, including advising on data breach response and notification obligations, providing advice regarding communications strategies, engaging third-party experts, and responding to US and international regulatory inquiries and investigations.

Mike also has significant experience advising clients on electronic monitoring and surveillance issues, including legal issues and risks associated with the Electronic Communications Privacy Act (ECPA) and Foreign Intelligence Surveillance Act (FISA).

Mike is a certified information privacy professional (CIPP/US) by the International Association of Privacy Professionals (IAPP).

In addition, Mike maintains an active pro bono practice. He has represented pro bono clients in asylum cases and has advised a variety of issues, including privacy and cybersecurity obligations and US national security policies and regulations.

Bar Admissions

Education
JD, Duke University School of Law, 2012

MA, Political Science, Concentration in Security Studies, Duke University, 2012

BA, Political Science, Colgate University, magna cum laude, 2008

• IoT Devises Raise a Host of Privacy Issues, San Francisco Daily Journal
• Privacy and Data Security Due Diligence in M&A Transactions, Practical Law Intellectual Property & Technology
• President Biden’s Executive Order Enables Agencies to Address Key Artificial Intelligence Risks, Privacy & Cybersecurity Law Report
• The Internet of Things: Emerging Legal Issues for Businesses, Northern Kentucky Law Review
• What To Know About State-Level Health Data Privacy Laws, Law360
• New York – Cybersecurity, OneTrust DataGuidance
• Accountability in Cybersecurity and Privacy: Keeping Your Name Out of the Headlines, Retail Industry 2022 Year in Review
• NYDFS Proposes Updated Second Amendment to Its Cybersecurity Regulation, NYU Law’s Program on Corporate Compliance and Enforcement Blog
• U.S. Issues Guidance to Companies Warning of Cybersecurity and Sanctions Risks Posed by IT Workers Directed by North Korea, The Banking Law Journal
• Privacy and Data Security in ESG, Corporate Counsel
• Hunton AI and Emerging Technologies 2023 Year in Review
• 2023 Retail Industry Year in Review
• Hunton AI and Emerging Technologies Newsletter - Fall 2023