Aaron advises clients on a broad range of complex global privacy, data protection and cybersecurity matters, including with respect to existing and emerging requirements in the US and EU. As co-head of the firm's global data, cyber and privacy team, Aaron's work includes advising clients on large-scale cybersecurity incidents; conducting diligence and negotiating privacy and data security aspects of corporate transactions; developing of cross-border data transfer solutions; developing local, regional and international privacy and data protection compliance programs with existing and emerging data protection requirements in Europe and the US; and negotiating data-driven commercial agreements.Aaron is well known as a top privacy professional and has been recognized by Chambers and Partners, The Legal 500 and Computerworld for his work on behalf of clients. Aaron splits his time between the firm's New York and London offices, and is the only lawyer currently listed in both The Legal 500 United Kingdom and The Legal 500 United States guides, providing clients with a broad and unique transatlantic perspective. He is a sought-after media resource on privacy issues and has been quoted in such publications as Time Magazine, Bloomberg BNA, Businessweek Magazine, Computer Weekly, Corporate Secretary, DataGuidance, Law360, SC Magazine and The Times. Aaron regularly speaks before industry groups, legal organizations, government agencies and educational institutions at conferences, seminars, roundtables and webinars. He has written and co-written numerous articles, book chapters and handbooks on privacy and information security issues.

Bar Admissions
England and Wales (Registered Foreign Lawyer)

New York

Education
JD, University of Virginia School of Law, 2002

BA, The University of Texas, High Honors, 1997

2020 Retail Industry Year in Review

Accountability in Cybersecurity and Privacy: Keeping Your Name Out of the Headlines, Retail Industry 2022 Year in Review

Best Practices for Data Privacy and Security in the HR Space, Practical Law Practice Note

Board Oversight of Privacy and Cybersecurity Risk: Why Delaware Developments Matter, The Computer & Internet Lawyer

California Consumer Privacy Act and Its Impact on M&A Transactions, Deal Lawyers

California Consumer Privacy Act and Its Impact, Los Angeles Business Journal

California Consumer Privacy Act: A Sea of Change for Retailers, Chain Store Age

Chapter 36: USA, The International Comparative Legal Guide to: Data Protection 2017, 4th Edition

Comment: Data Protection Outlook for 2011: A Global Discussion, Data Protection Law & Policy

Complying with Breach Notification Obligations in a Global Setting: A Legal Perspective, The Guide to Cyber Investigations, Global Investigations Review, Edition 1

Cybersecurity and Data Breach, Bloomberg BNA Privacy & Data Security Portfolio Series

Data Protection & Privacy ‒ United Kingdom

Data Protection & Privacy 2014, United States, Getting the Deal Through

Data Protection & Privacy 2015, The Future of Safe Harbor, Getting the Deal Through

Data Protection & Privacy 2015, United States, Getting the Deal Through

Data Protection & Privacy 2016, The Future of Safe Harbor, Getting the Deal Through

Data Protection & Privacy 2016, United States, Getting the Deal Through

Data Protection & Privacy 2017, Safe Harbor and the Privacy Shield and United States Chapters, Getting the Deal Through

Data Protection & Privacy 2027 ‒ Global Overview

Data Protection & Privacy 2027 ‒ United Kingdom

Data Protection & Privacy 2018, Safe Harbor and the Privacy Shield, United States, and United Kingdom Chapters, Getting the Deal Through

Data Protection & Privacy 2019, Belgium, Getting the Deal Through

Data Protection & Privacy 2019, EU Overview, Getting the Deal Through

Data Protection & Privacy 2019, Introduction, Getting the Deal Through

Data Protection & Privacy 2019, The Privacy Shield, Getting the Deal Through

Data Protection & Privacy 2019, United Kingdom, Getting the Deal Through

Data Protection & Privacy 2019, United States, Getting the Deal Through

Data Protection & Privacy 2020, Getting the Deal Through

Data Protection & Privacy 2020, Introduction, Getting the Deal Through

Data Protection & Privacy 2020, Overview, Getting the Deal Through

Data Protection & Privacy 2020, The Privacy Shield, Getting the Deal Through

Data Protection & Privacy 2020, United Kingdom, Getting the Deal Through

Data Protection & Privacy 2020, United States, Getting the Deal Through

Data Protection & Privacy 2021, EU Overview, Getting the Deal Through

Data Protection & Privacy 2021, Introduction, Getting the Deal Through

Data Protection & Privacy 2021, Privacy Shield, Getting the Deal Through

Data Protection & Privacy 2021, United Kingdom, Getting the Deal Through

Data Protection & Privacy 2021, United States, Getting the Deal Through

Data Protection & Privacy 2022, EU Overview, Getting the Deal Through

Data Protection & Privacy 2022, Introduction, Getting the Deal Through

Data Protection & Privacy 2022, Privacy Shield, Getting the Deal Through

Data Protection & Privacy 2022, United Kingdom, Getting the Deal Through

Data Protection & Privacy 2022, United States, Getting the Deal Through

Data Protection & Privacy 2023, EU Overview, Getting the Deal Through

Data Protection & Privacy 2023, Introduction, Getting the Deal Through

Data Protection & Privacy 2023, United Kingdom, Getting the Deal Through

Data Protection & Privacy 2023, USA, Getting the Deal Through

Data Security Handbook, ABA Section of Antitrust Law, Data Security Handbook

Dealmakers Ignore Cyber Risks at Their Own Peril, Pratt's Privacy & Cybersecurity Law Report

Do We Need a Data Protection Officer? (Flowchart), Thomas Reuters Practical Law

Emerging Legal Issues in Managing Cyber Risk for Pipelines, Pipeline & Gas Journal

Emerging Privacy Issues in Bankruptcy, New York Law Journal

ESG Hot Topics

EU Digital Markets Act: Key Aspects and Lingering Questions, CPO Magazine

European Commission Presents EU-U.S. Privacy Shield, Pratt's Privacy & Cybersecurity Law Report

European Union Data Protection, Chapter 11 in West's Data Security and Privacy Law: Combating Cyberthreats

HITECH Breaches: A How-To Guide, BNA's Health Law Reporter and Privacy & Security Law Report

How the EU Digital Markets Act Affects GDPR, Lawyer Monthly

In Confronting Cyberattacks, Preparation is Key, Digital Transactions

International: EU-US cross-border data transfers, OneTrust DataGuidance

Preservation and Monitoring of Corporate Messaging, New York Law Journal

Privacy and Data Security in ESG, Corporate Counsel

Privacy and Data Security Law Deskbook, Aspen Publishers

Privacy Shield Redux: Looking Ahead to a New EU-U.S. Data Transfer Framework, CPO Magazine

States With Robust Privacy Laws Likely to Oppose Federal Bill

Surviving an FTC Investigation After a Data Breach, New York Law Journal

Texas Emerges as a Leading Force in State Privacy Law Enforcement

The EU AI Act: Guide for In-House Lawyers

The Journey to GDPR: Compliance Did Not End on 25 May, Lawyer Monthly

The Privacy Shield Gets the Green Light from the European Union, Bloomberg BNA World Data Protection Report

The Shifting Sands of Data Protection and Resulting Privacy Pitfalls, State Bar of Texas - 10th Annual Advanced In-House Counsel Course

The Stimulus Package and Health Privacy Breaches, Lawdragon

The UK's commitment to the GDPR, ITProPortal

U.S. House Privacy Working Group's RFI Driving Stakeholder Responses to Inform its Crafting of New Federal Privacy and Data Security Legislation

U.S. Issues Guidance to Companies Warning of Cybersecurity and Sanctions Risks Posed by IT Workers Directed by North Korea

USA Data Protection 2015, ICLG

USA, The International Comparative Legal Guide to Data protection 2017

USA, The International Comparative Legal Guide to: Data Protection 2016, 3rd Edition

USA: SB 3300 and omnibus federal data protection efforts, DataGuidance

Virginia and Colorado Add to the Evolving US Privacy Landscape, Retail Industry 2021 Year in Review

White House Proposes Cybersecurity Legislation, Bloomberg Technology Law Reporter