Covington & Burling LLP operates as a limited liability partnership worldwide, with the practice in England and Wales conducted by an affiliated
limited liability multinational partnership, Covington & Burling LLP, which is formed under the laws of the State of Delaware in the United States
and authorized and regulated by the Solicitors Regulation Authority with registration number 77071..
As the privacy and cybersecurity landscape rapidly evolves across the globe, the law regulating these areas presents novel challenges for companies and organizations. Anticipating, understanding, and complying with current and emerging legislation and regulation in this area is crucial. Covington’s Public Policy and Data Privacy and Cybersecurity practices work hand-in-hand using a multidisciplinary approach that provides clients with substantive and comprehensive advocacy and regulatory services, helping them to achieve their business goals.
Covington stands out because of our strategic global insight gained from advising clients on privacy and data security matters for more than 25 years, paired with a deep understanding of the legislative and policy-making process in a variety of global markets. Our team has broad expertise from extensive work with legislatures and regulators in countries around the world as they develop their privacy, data protection and cyber security frameworks, as well as laws to regulate data more generally.
In particular, we cover geographies with increasing privacy and data security legislative activity, such as the U.S., Europe, Africa, the Middle East, China, India, and Brazil. From our Dubai office, we provide services across the Middle East, including the UAE and Saudi Arabia, and we provide pan-Africa coverage from our Johannesburg office, where we played an integral role in putting into place Rwanda’s data protection legislation.
We also continue to be active in advising on privacy, cyber and data regulation at the state-level in the U.S., including frameworks that have particular influence such as California. We have advised our trade organization and company clients on (now enacted) legislation in Virginia and Colorado, as well as legislative proposals in numerous other U.S. states. We were deeply involved in representing clients in helping to shape the EU General Data Protection Regulation (GDPR), as well as its precursor, the EU Data Protection Directive. We have been actively engaged in efforts to help influence data protection frameworks in Brazil, China, and India.
Our team supports businesses in a broad range of industries, including but not limited to:
Consumer Services and Products
Energy
Life Sciences, Digital Health, and Pharmaceuticals
Financial Services
Technology
Services In-depth
Comprehensive Advocacy and Action
We are not only at the forefront of emerging policies and legislation, but can also draw on the expertise of lawyers in related practices across the firm as needed, such as White Collar Defense and Investigations, Employment, Commercial Litigation, Communications and Media, Advertising and Consumer Protection Investigations, and Digital Health, enabling us to help our clients with the complete spectrum of data privacy and cybersecurity legislation.
Covington offers a wide array of advocacy, advisory, and compliance services, including:
Advocating on behalf of clients to shape the debate on proposed legislation, including by engaging with government and other stakeholders, drafting submissions in connection with public consultations and preparing white papers on behalf of clients
Providing advisory services on the impact of both proposed and enacted legislation
Advising on compliance with recently enacted privacy and cybersecurity legislation
Representing clients in privacy and cyber-related rulemakings, hearings, and workshops before a wide range of policymakers, including the U.S. Federal Trade Commission (FTC), Federal Communications Commission, U.S. Congress, and State legislatures and State Attorneys General