He provides practical advice that advances business objectives while managing risks. Jon’s clients cover nearly every industry, market, and stage of development, and include large technology and media companies, financial institutions and insurers, health and wellness companies, and startups. He helps clients develop and maintain privacy compliance programs and counsels on a variety of product development and business operations topics, including advertising, emerging technologies, and data monetization. His background includes advising on US federal and state and international privacy laws, including state laws like the California Consumer Privacy Act and similar laws in other states, the Gramm-Leach-Bliley Act, marketing laws including the CAN-SPAM Act and Telephone Consumer Protection Act, and biometric data privacy laws like the Illinois Biometric Information Privacy Act. He has deep technical knowledge that allows him to work directly with engineering and product teams on issues involving cutting-edge technologies, emerging AI applications, and complex data ecosystems.

Jonathan regularly speaks and writes on privacy, cybersecurity, and AI topics at industry events and in industry publications.

Show Less

• Worked with a large technology company on all aspects of privacy-compliant development of consumer wearable device
• Assisted companies in several industries in responding to regulatory inquiries involving privacy practices
• Helped multiple companies stand up biometric privacy compliance programs
• Advised tier 1 PCI merchant on preparation for a Report on Compliance conducted by Qualified Security Assessor, and advised on actions to be taken to address gaps and remediate risks
• Assisted large government contractor with response to data breach, including analysis of obligations under the Defense Federal Acquisition Regulation Supplement and other government contracting rules and regulations
• Vetted privacy and cybersecurity risks in acquisitions of highly regulated businesses, including under debt collection laws, Fair Credit Reporting Act, marketing laws, the Health Insurance Portability and Accountability Act, and biometric privacy laws
• Guided firm through registration as a data broker
• Advised retailer on development of program involving collection and processing of biometric data, including drafting appropriate notice-and-consent forms, creating retention and deletion policies, and negotiating contracts with vendors
• Advised financial and insurance services business on creation of a privacy compliance program that harmonizes requirements under US federal and state financial and insurance privacy laws

Show Less