Privacy and Cybersecurity Litigation


Our team has substantial experience litigating complex data privacy issues, including in relation to core data protection concepts, such as legal bases under the GDPR and UK GDPR (particularly for purposes of behavioral or targeted ads), the scope of special category data, and complex data minimization issues. We also counsel clients through compliance measures following Court of Justice of the European Union (CJEU) and European Data Protection Board decisions, Federal Trade Commission consent orders, and the decisions of other data protection authorities and courts.

Over the last decade, our litigation team has successfully represented the world's largest companies in hundreds of privacy-related disputes, defending cases before the highest courts, including the CJEU, as well as defending class action test cases and representing clients before and in litigation against supervisory authorities throughout the world.

The growing number of privacy and cybersecurity class actions means that we frequently represent clients in complex group litigations stemming from data breaches, user consent issues, data-sharing practices, and security vulnerabilities. The prevalence of new laws and regulations in this space is likely to increase the volume and frequency of privacy-related class actions in the future.


Providing full coverage

The White & Case Data, Privacy & Cybersecurity team also specializes in the following areas:

Privacy advisory and compliance

Cybersecurity advisory and compliance

Incident response

AI regulatory

Content and non-privacy data regulation


Client Resources

Visit our Thought Leadership page

Visit our Cybersecurity: Legal implications and risk management page


View all lawyers in Data, Privacy & Cybersecurity