Mr. Fattal advises clients in a variety of industries on complex data privacy and cybersecurity issues related to state, federal, and global legal frameworks, including the California Consumer Protection Act (CCPA), the General Data Protection Regulation (GDPR), the Biometric Information Privacy Act (BIPA), the Gramm-Leach- Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), the Telephone Consumer Protection Act (TCPA), and the Children’s Online Privacy Protection Act (COPPA). Mr. Fattal assists clients in developing information security policies and procedures, negotiating data transfer and processing agreements, designing third party vendor risk management programs, and product development and design.Mr. Fattal also advises clients on incident response strategy, assisting companies in investigating data breaches and preparing notifications to customers, affected individuals, and regulators. As part of his practice, Mr. Fattal regularly performs privacy and security due diligence and negotiates transaction documents in connection with public and private corporate deals.
Prior to joining Goodwin, Mr. Fattal was a Cyber/Data/Privacy associate in the New York office of Cooley LLP.Mr. Fattal previously served as an Attorney Advisor in the Intelligence Law Division at the U.S. Department of Homeland Security, where he advised government officials on compliance with domestic and international privacy regimes and data security matters related to information sharing, data analytics, and cloud computing technology.