Jeff Kosseff

Jeff Kosseff is Counsel in the firm’s Privacy and Cybersecurity practice group.  Mr. Kosseff brings experience counseling clients – ranging from start-ups to some of the world’s largest companies — on emerging privacy and cybersecurity legal issues.  He is the author of the treatise and textbook Cybersecurity Law, which was published by Wiley in February 2017, with a second edition published in 2019.

Mr. Kosseff advises companies on compliance with a wide range of privacy and cybersecurity laws. He helps companies ensure that their information security programs, business agreements, and privacy programs comply with state, federal, and international privacy laws and standards.  He has drafted privacy policies, negotiated data security and privacy provisions in contracts, and prepared incident response programs.

Mr. Kosseff helps companies respond to cybersecurity incidents, such as data breaches and denial-of-service attacks.  He often advises clients on structuring incident responses to increase the likelihood of the work product and communications being covered by a legal privilege.

Before becoming a lawyer, he was a journalist for The Oregonian newspaper and was a finalist for the Pulitzer Prize for national reporting and recipient of the George Polk Award for national reporting.

Representative Experience

• Designed comprehensive information security programs for compliance with state, federal, and international laws
• Counsel clients on data protection laws, including the General Data Protection Regulation and the California Consumer Privacy Act
• Drafted and negotiated contractual provisions regarding privacy and cybersecurity
• Drafted external privacy notices and internal privacy policies
• Oversaw forensic investigations into cybersecurity incidents
• Counseled companies on federal, state, and international privacy laws and PCI-DSS
• Advised companies on responses to data breaches
• Led the development and implementation of information security policies and Privacy by Design programs
• Advised clients on advertising law, FTC disclosure rules, DAA/NAI Codes, and endorsement guidelines
• Litigated cybersecurity, privacy, and electronic surveillance issues in federal and state courts