Navigating the Data Privacy Minefield

David Zetoony, Co-Chair of the firm's U.S. Data, Privacy and Cybersecurity Practice, focuses on helping businesses navigate data privacy and cyber security laws from a practical standpoint.

David has helped hundreds of companies establish and maintain ongoing privacy and security programs, and he has defended corporate privacy and security practices in investigations initiated by the Federal Trade Commission, and other data privacy and security regulatory agencies around the world, as well as in class action litigation.

David receives regular recognitions from clients and peers for his knowledge and experience in the fields of data privacy and security. The National Law Journal named him a “Cybersecurity and Data Privacy Trailblazer,” JD Supra recognized him four times as one of the most widely read names when it comes to data privacy, cyber security, or the collection and use of data, and Lexology identified him seven times as the top “legal influencer” in the area of technology, media, and telecommunications in the United States, the European Union, and in the context of cross-border transfers of information. He is the author of the American Bar Associations primary publication on the European General Data Protection Regulation (GDPR) and the American Bar Association's Desk Reference Companion to the California Privacy Rights Act (CPRA).

Chad is a content manager for Lexis Practice Advisor in its IP & Technology group, specializing in technology transactions and IP/IT in corporate transactions. Prior to joining LexisNexis, Chad founded a mobile media startup focused on designing content discovery solutions for legal professionals. Previously, Chad was an IP, technology and commercial editor for Practical Law. Prior to joining Practical Law, Chad served as general counsel for Axispoint, Inc., a New York-based IT services and software development company. He has also worked for large law firms in New York and Sydney, as well as in-house at Orange Glo International, a well-known manufacturer of household cleaning products.

As the chair of the firm’s Global Data Privacy and Cybersecurity team, Amy de La Lama specializes in global privacy, data security and cyber security and provides advice to a wide range of multi-national pharmaceutical and medical device companies, retail companies, online businesses, B2B companies, and other types of organizations regarding these issues.

Amy has broad experience guiding clients through the development and implementation of broad-based privacy compliance programs as well as advising clients on GDPR and similar global privacy laws in addition to CCPA, HIPAA and other US privacy law issues.

Amy also provides guidance on breach notification preparedness and response and assists clients in addressing federal, state and global breach notification requirements and responding to related inquiries from government agencies and other parties.

Prior to joining the firm, Amy served as a Partner in the data privacy and security practice of a multinational law firm. She is a certified privacy professional through the International Association of Privacy Professionals (CIPP/US).

Courtney Stout is the Chief Privacy Officer for S&P Global, and is well-known for her work in the areas of privacy and cybersecurity. She is a problem solver who gives practical advice on scoping and managing risk arising from global data protection regulations. At S&P Global, Courtney works with global data protection regulations and has expertise in laws throughout the Americas, Europe, and Asia. She is a strong leader who draws on the power of positive energy to balance privacy and cyber risk with business needs and growth opportunities.

Before joining S&P Global, Courtney acted as Counsel and Co-lead of the Blockchain team for Davis Wright Tremaine LLP in Washington, D.C. There, Courtney’s practice focused on the intersection between privacy, technology and financial services. She counseled clients regarding best practices to reduce the risk associated with technology transactions in both traditional commercial contracts and a variety of strategic m-commerce and e-commerce agreements.

Courtney was an attorney at Bryan Cave LLP in Washington, DC and Hunton & Williams in Atlanta where she concentrated her practice in the areas of payment, privacy, outsourcing, technology and commercial practice.

Courtney received the IAPP certifications for Certified Information Privacy Professional / Europe (CIPP/E) and Certified Information Privacy Manager (CIPM).

Courtney holds a Juris Doctorate from the Vanderbilt University School of Law, and a bachelor’s degree from the University of Georgia.