Careers

Talent Engagement

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Home | BakerHostetler

NLRB Readopts 2020 Joint Employer Rule, Sunsets Biden Rule

Test new insight

S&G Article #2

Securities and governance litigation insights

Moreover, companies that previously had no need to collect sensitive health information from employees have grappled with issues relating to the collection of temperature data, vaccine information and COVID-19 test data, as well as the appropriate retention of this information, as a result of the global pandemic.&nbsp;

core/paragraph

<p>Moreover, companies that previously had no need to collect sensitive health information from employees have grappled with issues relating to the collection of temperature data, vaccine information and COVID-19 test data, as well as the appropriate retention of this information, as a result of the global pandemic.&nbsp;</p>

In January 2023, through the enactment of the California Privacy Rights Act (CPRA), California became the first U.S. state to enact a comprehensive data privacy law covering employee data, bringing this data into the scope of one of the most rigid data protection regulations in the world. Employers face many challenges in managing associated compliance requirements for their California workforce, including the unstructured nature of employee data and the complicated intersection of data protection and employment laws. Less than a year after the CPRA took effect, the California Attorney General’s Office announced an investigation sweep into California employers’ compliance with these requirements, signaling that regulators are focused on employee data practices in addition to consumer data practices.

<p>In January 2023, through the enactment of the California Privacy Rights Act (CPRA), California became the first U.S. state to enact a comprehensive data privacy law covering employee data, bringing this data into the scope of one of the most rigid data protection regulations in the world. Employers face many challenges in managing associated compliance requirements for their California workforce, including the unstructured nature of employee data and the complicated intersection of data protection and employment laws. Less than a year after the CPRA took effect, the California Attorney General’s Office announced an investigation sweep into California employers’ compliance with these requirements, signaling that regulators are focused on employee data practices in addition to consumer data practices.</p>

Ransomware and other cybercrimes can expose data and disrupt business operations, and even unwitting employee error can result in a data breach. Many companies have undergone an abrupt shift to hybrid workplaces and work-from-home arrangements, presenting various additional risks that sensitive information will be exposed or threatened.

Start with the basic building block of all narrative.

In a village of La Mancha, the name of which I have no desire to call to mind, there lived not long since one of those gentlemen that keep a lance in the lance-rack, an old buckler, a lean hack, and a greyhound for coursing.

Paragraph

paragraph

Paragraph that resizes to fit its container.

stretchy-paragraph

Stretchy Paragraph

<p>Ransomware and other cybercrimes can expose data and disrupt business operations, and even unwitting employee error can result in a data breach. Many companies have undergone an abrupt shift to hybrid workplaces and work-from-home arrangements, presenting various additional risks that sensitive information will be exposed or threatened.</p>

Our team combines the strengths of two powerhouse practice groups – Labor and Employment and Digital Assets and Data Management (DADM) – to deliver best-in-class counsel on myriad federal, state and local laws relating to data privacy protection in order to avoid contentious matters such as litigation, government enforcement actions and negative publicity. We are well equipped to lead and defend your company in this high-stakes arena and help you best prepare for and navigate government investigations or enforcement actions should these arise.

<p>Our team combines the strengths of two powerhouse practice groups – Labor and Employment and Digital Assets and Data Management (DADM) – to deliver best-in-class counsel on myriad federal, state and local laws relating to data privacy protection in order to avoid contentious matters such as litigation, government enforcement actions and negative publicity. We are well equipped to lead and defend your company in this high-stakes arena and help you best prepare for and navigate government investigations or enforcement actions should these arise.</p>

We excel at helping employers discover where they are vulnerable, and we help strengthen their defenses and employ best practices across the enormous range of employee privacy-related areas, including bring-your-own-device (BYOD) practices, social media, background checks, contact tracing, biometric authentication, artificial intelligence programs, payroll and third-party vendors.

<p>We excel at helping employers discover where they are vulnerable, and we help strengthen their defenses and employ best practices across the enormous range of employee privacy-related areas, including bring-your-own-device (BYOD) practices, social media, background checks, contact tracing, biometric authentication, artificial intelligence programs, payroll and third-party vendors.</p>

Our labor and employment and privacy attorneys are deeply experienced and nationally recognized as leaders in their fields, and support businesses of all sizes with smart, timely and effective counsel. Our multidisciplinary team of labor and employment and DADM attorneys provides strategic counseling on compliance with data privacy laws, conducts data privacy audits, provides proactive training and risk assessments, responds to security and compliance incidents, negotiates and responds to consumer or regulator inquiries on behalf of employers, and handles all the complexities of privacy-related matters, including litigation and class actions.

<p>Our labor and employment and privacy attorneys are deeply experienced and nationally recognized as leaders in their fields, and support businesses of all sizes with smart, timely and effective counsel. Our multidisciplinary team of labor and employment and DADM attorneys provides strategic counseling on compliance with data privacy laws, conducts data privacy audits, provides proactive training and risk assessments, responds to security and compliance incidents, negotiates and responds to consumer or regulator inquiries on behalf of employers, and handles all the complexities of privacy-related matters, including litigation and class actions.</p>

<strong>We are experienced in advising and counseling our clients on:</strong>

<p><strong>We are experienced in advising and counseling our clients on:</strong></p>

An organized collection of items displayed in a specific order.

core/list

List


<ul class="wp-block-list">
<li>Federal, state and international laws and regulations, including the CPRA, the California Consumer Privacy Act (CCPA),the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act, the Computer Fraud and Abuse Act (CFAA), the Electronic Communications Privacy Act, the Wiretap Act, the Stored Communications Act, the Fair Credit Reporting Act (FCRA), the Fair and Accurate Credit Transactions Act, and others.</li>



<li>Management of workplace data and records, including the implementation and management of companywide compliance and information governance programs, policies and procedures; the management and protection of personal data, trade secrets and competitive confidential information; and the implementation and enforcement of social media policies and BYOD policies.</li>



<li>Drafting global applicant and employee privacy notices and strategic counseling regarding new employee privacy notice requirements under the CPRA.</li>



<li>Drafting policies on monitoring, remote work, social media productivity management software, email, text messaging and Internet usage as well as the use of evolving technologies for tracking employees and other workers, especially in a remote work environment.</li>



<li>Employee privacy rights under the CPRA and the GDPR, including strategic counseling relating to applicable exceptions to deletion and correction of, as well as access to employee data.</li>



<li>Healthcare and medical privacy-related issues and biometrics.</li>



<li>Timekeeping compliance and tracking and monitoring of company-provided devices.</li>



<li>Privacy-related issues, including background investigations, associated with hiring employees and contractors.</li>



<li>Compliance with the National Labor Relations Act workplace rights and collective bargaining issues associated with workplace privacy and monitoring.</li>



<li>Meeting government contract regulations and managing vendor relationships, including the drafting of data security agreements.</li>



<li>Responding to data protection authorities and privacy regulators in response to privacy complaints received from employees or former employees.</li>



<li>Responding to, investigating, and mitigating data breach incidents as well as defending if litigation ensues.</li>



<li>Conducting workplace privacy audits and making recommendations in coordination with privacy decision-makers, including human resources personnel, privacy officers, information technology staff and boards.</li>
</ul>


Federal, state and international laws and regulations, including the CPRA, the California Consumer Privacy Act (CCPA),the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act, the Computer Fraud and Abuse Act (CFAA), the Electronic Communications Privacy Act, the Wiretap Act, the Stored Communications Act, the Fair Credit Reporting Act (FCRA), the Fair and Accurate Credit Transactions Act, and others.

core/list-item

List Item

<li>Federal, state and international laws and regulations, including the CPRA, the California Consumer Privacy Act (CCPA),the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act, the Computer Fraud and Abuse Act (CFAA), the Electronic Communications Privacy Act, the Wiretap Act, the Stored Communications Act, the Fair Credit Reporting Act (FCRA), the Fair and Accurate Credit Transactions Act, and others.</li>

Management of workplace data and records, including the implementation and management of companywide compliance and information governance programs, policies and procedures; the management and protection of personal data, trade secrets and competitive confidential information; and the implementation and enforcement of social media policies and BYOD policies.

<li>Management of workplace data and records, including the implementation and management of companywide compliance and information governance programs, policies and procedures; the management and protection of personal data, trade secrets and competitive confidential information; and the implementation and enforcement of social media policies and BYOD policies.</li>

Drafting global applicant and employee privacy notices and strategic counseling regarding new employee privacy notice requirements under the CPRA.

<li>Drafting global applicant and employee privacy notices and strategic counseling regarding new employee privacy notice requirements under the CPRA.</li>

Drafting policies on monitoring, remote work, social media productivity management software, email, text messaging and Internet usage as well as the use of evolving technologies for tracking employees and other workers, especially in a remote work environment.

<li>Drafting policies on monitoring, remote work, social media productivity management software, email, text messaging and Internet usage as well as the use of evolving technologies for tracking employees and other workers, especially in a remote work environment.</li>

Employee privacy rights under the CPRA and the GDPR, including strategic counseling relating to applicable exceptions to deletion and correction of, as well as access to employee data.

<li>Employee privacy rights under the CPRA and the GDPR, including strategic counseling relating to applicable exceptions to deletion and correction of, as well as access to employee data.</li>

Healthcare and medical privacy-related issues and biometrics.

<li>Healthcare and medical privacy-related issues and biometrics.</li>

Timekeeping compliance and tracking and monitoring of company-provided devices.

<li>Timekeeping compliance and tracking and monitoring of company-provided devices.</li>

Privacy-related issues, including background investigations, associated with hiring employees and contractors.

<li>Privacy-related issues, including background investigations, associated with hiring employees and contractors.</li>

Compliance with the National Labor Relations Act workplace rights and collective bargaining issues associated with workplace privacy and monitoring.

<li>Compliance with the National Labor Relations Act workplace rights and collective bargaining issues associated with workplace privacy and monitoring.</li>

Meeting government contract regulations and managing vendor relationships, including the drafting of data security agreements.

<li>Meeting government contract regulations and managing vendor relationships, including the drafting of data security agreements.</li>

Responding to data protection authorities and privacy regulators in response to privacy complaints received from employees or former employees.

<li>Responding to data protection authorities and privacy regulators in response to privacy complaints received from employees or former employees.</li>

Responding to, investigating, and mitigating data breach incidents as well as defending if litigation ensues.

<li>Responding to, investigating, and mitigating data breach incidents as well as defending if litigation ensues.</li>

Conducting workplace privacy audits and making recommendations in coordination with privacy decision-makers, including human resources personnel, privacy officers, information technology staff and boards.

<li>Conducting workplace privacy audits and making recommendations in coordination with privacy decision-makers, including human resources personnel, privacy officers, information technology staff and boards.</li>

<ul><li>Federal, state and international laws and regulations, including the CPRA, the California Consumer Privacy Act (CCPA),the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act, the Computer Fraud and Abuse Act (CFAA), the Electronic Communications Privacy Act, the Wiretap Act, the Stored Communications Act, the Fair Credit Reporting Act (FCRA), the Fair and Accurate Credit Transactions Act, and others.</li><li>Management of workplace data and records, including the implementation and management of companywide compliance and information governance programs, policies and procedures; the management and protection of personal data, trade secrets and competitive confidential information; and the implementation and enforcement of social media policies and BYOD policies.</li><li>Drafting global applicant and employee privacy notices and strategic counseling regarding new employee privacy notice requirements under the CPRA.</li><li>Drafting policies on monitoring, remote work, social media productivity management software, email, text messaging and Internet usage as well as the use of evolving technologies for tracking employees and other workers, especially in a remote work environment.</li><li>Employee privacy rights under the CPRA and the GDPR, including strategic counseling relating to applicable exceptions to deletion and correction of, as well as access to employee data.</li><li>Healthcare and medical privacy-related issues and biometrics.</li><li>Timekeeping compliance and tracking and monitoring of company-provided devices.</li><li>Privacy-related issues, including background investigations, associated with hiring employees and contractors.</li><li>Compliance with the National Labor Relations Act workplace rights and collective bargaining issues associated with workplace privacy and monitoring.</li><li>Meeting government contract regulations and managing vendor relationships, including the drafting of data security agreements.</li><li>Responding to data protection authorities and privacy regulators in response to privacy complaints received from employees or former employees.</li><li>Responding to, investigating, and mitigating data breach incidents as well as defending if litigation ensues.</li><li>Conducting workplace privacy audits and making recommendations in coordination with privacy decision-makers, including human resources personnel, privacy officers, information technology staff and boards.</li></ul>

contentpilot/expand-more

<section class="wp-block-contentpilot-expand-more"><div class="wp-block-contentpilot-expand-more__excerpt is-visible" data-selector="expand-more"><p></p></div><div class="wp-block-contentpilot-expand-more__full-content" data-selector="expand-more"><p>Ransomware and other cybercrimes can expose data and disrupt business operations, and even unwitting employee error can result in a data breach. Many companies have undergone an abrupt shift to hybrid workplaces and work-from-home arrangements, presenting various additional risks that sensitive information will be exposed or threatened.</p><p>Our team combines the strengths of two powerhouse practice groups – Labor and Employment and Digital Assets and Data Management (DADM) – to deliver best-in-class counsel on myriad federal, state and local laws relating to data privacy protection in order to avoid contentious matters such as litigation, government enforcement actions and negative publicity. We are well equipped to lead and defend your company in this high-stakes arena and help you best prepare for and navigate government investigations or enforcement actions should these arise.</p><p>We excel at helping employers discover where they are vulnerable, and we help strengthen their defenses and employ best practices across the enormous range of employee privacy-related areas, including bring-your-own-device (BYOD) practices, social media, background checks, contact tracing, biometric authentication, artificial intelligence programs, payroll and third-party vendors.</p><p>Our labor and employment and privacy attorneys are deeply experienced and nationally recognized as leaders in their fields, and support businesses of all sizes with smart, timely and effective counsel. Our multidisciplinary team of labor and employment and DADM attorneys provides strategic counseling on compliance with data privacy laws, conducts data privacy audits, provides proactive training and risk assessments, responds to security and compliance incidents, negotiates and responds to consumer or regulator inquiries on behalf of employers, and handles all the complexities of privacy-related matters, including litigation and class actions.</p><p><strong>We are experienced in advising and counseling our clients on:</strong></p><ul><li>Federal, state and international laws and regulations, including the CPRA, the California Consumer Privacy Act (CCPA),the General Data Protection Regulation (GDPR), the Illinois Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act, the Computer Fraud and Abuse Act (CFAA), the Electronic Communications Privacy Act, the Wiretap Act, the Stored Communications Act, the Fair Credit Reporting Act (FCRA), the Fair and Accurate Credit Transactions Act, and others.</li><li>Management of workplace data and records, including the implementation and management of companywide compliance and information governance programs, policies and procedures; the management and protection of personal data, trade secrets and competitive confidential information; and the implementation and enforcement of social media policies and BYOD policies.</li><li>Drafting global applicant and employee privacy notices and strategic counseling regarding new employee privacy notice requirements under the CPRA.</li><li>Drafting policies on monitoring, remote work, social media productivity management software, email, text messaging and Internet usage as well as the use of evolving technologies for tracking employees and other workers, especially in a remote work environment.</li><li>Employee privacy rights under the CPRA and the GDPR, including strategic counseling relating to applicable exceptions to deletion and correction of, as well as access to employee data.</li><li>Healthcare and medical privacy-related issues and biometrics.</li><li>Timekeeping compliance and tracking and monitoring of company-provided devices.</li><li>Privacy-related issues, including background investigations, associated with hiring employees and contractors.</li><li>Compliance with the National Labor Relations Act workplace rights and collective bargaining issues associated with workplace privacy and monitoring.</li><li>Meeting government contract regulations and managing vendor relationships, including the drafting of data security agreements.</li><li>Responding to data protection authorities and privacy regulators in response to privacy complaints received from employees or former employees.</li><li>Responding to, investigating, and mitigating data breach incidents as well as defending if litigation ensues.</li><li>Conducting workplace privacy audits and making recommendations in coordination with privacy decision-makers, including human resources personnel, privacy officers, information technology staff and boards.</li></ul><p></p></div><button class="wp-block-contentpilot-expand-more__more-button is-visible" data-selector="expand-more">View More</button><button class="wp-block-contentpilot-expand-more__less-button" data-selector="expand-more">View Less</button></section>

R. Bisi Adeyemo

M. Scott McIntyre

Theodore J. Kobus III

Joel Griswold

Amy J. Traub

Melinda L. McLellan

Bonnie Keane DelGobbo

Carolina A. Alonso

Janine Anthony Bowen

Aleksandra Vold

Kimberly C. Gordy

Katherine Ondeck Kent

Sean P. Ryan

Jennifer D. Ghassemi

Justin T. Yedor

Jennifer L. Mitchell

Los Angeles

Partner

Cincinnati

Employment Law Spotlight

Viral Layoffs: Important Considerations for Employment Actions in the Digital Age

Webinar: AI in the Workplace: The Possibilities and Avoiding the Pitfalls

Employers may face legal consequences for worker surveillance

Webinar: Tag This: Managing Employee Social Media Use Outside the Workplace

New NYC law mandates audits, transparency in employer use of AI hiring tools

Data Counsel

What About the Robots That Are Already Here? New York City to Begin Enforcement of Artificial Intelligence Applications Related to Applicants and Employees Through the NYC Automated Employment Decision Tools Law on July 5, 2023

My Health My Data: New Proposed Washington Law Aims to Protect Consumer Health Data

Iowa Becomes the Sixth U.S. State to Pass a Comprehensive Consumer Privacy Law

With New Enforcement Action, FTC Warns Against Health Information Being Used for Advertising Purposes

Workplace Privacy: The Ever-Increasing Risks of Breaches and Maintaining Data and Information

Debriefing the <i>Dobbs</i> Decision: Unpacking What Employers Face in the Aftermath of the Overturning of <i>Roe v. Wade</i>

10th Annual Labor Relations and Employment Law Master Class Series

ADventures in Law

Compliance concept with icons, virtual screen, businessman touching button

Latest FTC Health Privacy Case Sheds Light on Agency Health Privacy Approaches

You are Being Monitored for Electronic Surveillance and Automated Management Practices, Says the NLRB

For California Electronic and Computing Services Companies, New Processes Required Before Responding to Warrants, Subpoenas and Other Information Requests

CCPA Employee and B2B Exemptions Set to Expire on Jan. 1, 2023

Services

Labor and Employment

Digital Assets and Data Management

Post-Roe Resource Center

<p><strong>Select Experience</strong></p>
<ul>
<li>Successfully defending purported class action employee privacy claims resulting from an alleged data breach.</li>
<li>Obtaining dismissal of FCRA claims resulting from an alleged data breach.</li>
<li>Successfully litigating online defamation claims for businesses and obtaining an injunction prohibiting a former employee’s cyberattacks.</li>
<li>Winning a published appellate opinion breaking new ground on privacy and confidentiality.</li>
<li>Successfully litigating Illinois BIPA claims.</li>
<li>Advising companies concerning managing workplace data in the work-from-home and hybrid work environments, including internationally.</li>
<li>Advised on compliant design of employers’ COVID-19 health and safety programs, including the appropriate collection and retention of temperature, test and symptom data.</li>
<li>Counseling about, advising on compliance with and litigating matters involving interception and surveillance issues, including the CFAA, the Electronic Communications Privacy Act, the Stored Communications Act and the Wiretap Act.</li>
<li>Litigating defamation, invasion of privacy, intrusion upon seclusion, public disclosure of private facts, false light and misappropriation claims.</li>
<li>Assisting clients with data retention and governance policies and practices.</li>
</ul>


Employee Privacy

Experience

Insights and News

Featured Insights

Experience

Related Services

Insights and News

Featured Insights