Boris Segalis is a partner in the firm’s Data, Privacy and Cybersecurity practice. For over a dozen years, he has counseled clients on a range of data, privacy, and cybersecurity issues in the context of business and product strategy, compliance with privacy and cybersecurity requirements, technology transactions, breach preparedness and response, disputes and regulatory investigations, and legislative and regulatory strategy.

Mr. Segalis regularly advises clients on the development and implementation of data-driven products and services (including those involving machine learning and biometric data processing), compliance with global privacy and cybersecurity requirements, cross-border data transfers, and third-party cyber risk management. He also advises clients on handling cyber incidents affecting companies and users globally, and defends companies in U.S. state, federal and foreign privacy and cybersecurity investigations. His work on data and cyber issues in tech transactions has encompassed M&A, private equity, buyouts, public offerings, and bankruptcy.

Mr. Segalis has been consistently recognized by Chambers USAChambers Global and Legal 500.
Areas of Practice
Domaines D’Expertise





Mr. Segalis advises clients across industries including financial services, fintech, insurtech, technology, big data and data brokerage, life sciences, cybersecurity, consumer product and services, e-commercial, media and entertainment, gaming, hospitality, transportation, prop tech, government, and others.

His recent representative experience includes advising:

Strategic Counseling

  • Advise multiple companies on the development and implementation of digital contact tracing and facility access solutions designed to mitigate the effects of COVID-19
  • Advise an enterprise solutions provider on the implementation of biometric identification for call recording and use of data for machine learning
  • Advise a business intelligence company on the collection of business contact information in the US and Europe
  • Advise a global cybersecurity software company on compliance with CCPA in connection with threat intelligence data collection
  • Advise clinical stage life sciences companies on collection and cross-border transfer of clinical trial data, and engagement with vendors, CRO and other partners
  • Advise a connected medical device company on engagement with clinical trial partners
  • Advise a fintech company on the implementation of a comprehensive information security program, compliance with the FCRA Red Flags Rule, compliance with NY DFS cybersecurity regulations and implementation of a third party risk management process
  • Advise a transportation authority on the implementation of the development and implementation of a vendor management program
  • Advise a proptech company on the establishment of a consumer reporting agency, subject to FCRA
  • Advise multiple fintech and insurech companies on compliance with the CCPA and the delineation of CCPA and GLBA data.
  • Advise a global media company on the implementation of online marketing programs and attribution tracking.
  • Advise a financial services and payment company on the establishment of data collection and sharing relationships with merchants and issuers
  • Advise a restaurant mobile ordering platform on compliance with CCPA and GLBA in connection with engagement with restaurants globally
  • Advise a focus group provider on privacy practice in connection with biometric data collection for product evaluation
  • Advise a data analytics company on the development of a variety of data analytics products and services leveraging clinical trial data
  • Advise a digital health company on the collection and processing of user and coach data
  • Advise a European financial services company on compliance with GDPR in connection with a service providing background checks for fund managers globally
  • Advise a digital identity company on the development and implementation of digital identity products and partnerships
  • Advise a global travel agency on compliance with the GDPR, including to facilitate engagement with customers
  • Advise a global media company on compliance with GDPR and CCPA

Incidents and Investigations

  • Advise large retailers on the handling of consequences of the Shopify data incident, including notification of regulators and over 10 million consumer globally, and follow-up regulatory inquiries
  • Advise a business process software companies on a data incident that affected over 600K users globally
  • Advise a global travel company on payment card incident that affected over 1 million consumers globally
  • Represent an AI photo editing app in an FTC privacy inquiry, and resolve the inquiry with the investigation closed
  • Represent a local threat information provider in an FTC privacy inquiry, and resolve the inquiry with the investigation closed
  • Represent a transportation authority in connection with a vendor cyber incident involving emergency communications
  • Serve as the court-appointed consumer privacy ombudsman in the CraftWorks bankruptcy proceedings
  • Advise a IoT crib manufacturer in connection with attempts to publicize false allegations of the device’s cyber vulnerabilities
  • Advise a life sciences company on several cyber incidents affecting clinical trial data
  • Advise a leading fintech company on a cyber fraud investigation


  • Advise BroadCom on the acquisition of Symantec
  • Advise a privacy equity firm on the acquisition of a biometric interviewing platform
  • Advise a fintech company on the development of white label / API lead generation platform for financial institutions
  • 4C Insights on its agreement to sell to software advertising provider Mediaocean, a portfolio company of Vista Equity Partners*
  • SevenRooms, a data-driven guest experience platform for the hospitality industry, on its $50 million Series B funding round*
  • Aircall on its $65 million Series C financing*
  • PeopleDoc, a cloud-based HR company, on its agreement to sell to Ultimate Software, a provider of human capital management software solutions, for approximately $300 million*
  • Arlo Technologies, the leading internet-connected camera brand, on its agreement to enter into a strategic partnership with Verisure Sàrl*

*Denotes experience prior to joining Goodwin.

Professional Experience

Prior to joining to Goodwin, Mr. Segalis was most recently the Vice Chair of the Cyber/Data/Privacy practice at Cooley LLP in New York.

Mr. Segalis began his career in the aerospace industry where he worked as an engineer on the Space Shuttle and other space programs.
Professional Activities

Mr. Segalis is a Certified Information Privacy Professional (CIPP/US) through the International Association of Privacy Professionals (IAPP), has previously served as co-chair of NYC IAPP KnowledgeNet and served on the IAPP’s Research Board. Mr. Segalis also serves as one of the leaders of the UJA privacy and cybersecurity group.


For six consecutive years, Mr. Segalis has been individually recognized by Chambers USA in the Privacy & Data Security category, and is recognized by Chambers Global for Privacy & Data Security — USA. He has also been recognized by Legal 500 as a leading lawyer in cyber law (including data privacy and data protection). Crain’s New York Business has previously included him in its 40 Under 40 list, and New York Metro has recognized Mr. Segalis as both a Super Lawyer and a Rising Star.

In The News









J.D., 2003
New York University School of Law
B.S., Mechanical Engineering, 1996
Georgia Institute of Technology



New York
Profile Image
Get In Touch
Our clients rely on us for world-class advisory services, counsel on complex transactional work and high-stakes litigation. Specializing in matters involving the financial, life sciences, private equity, real estate, and technology industries, we use a collaborative, cross-disciplinary approach to resolve our clients’ most challenging issues. To find out more, please contact us.


Nos équipes interviennent aux côtés de nos clients, industriels, fonds d’investissement, startups, institutions financières et dirigeants, dans le cadre de transactions et de contentieux complexes, et apportent des conseils de tout premier plan dans les secteurs financiers, des Sciences de la Vie, du Private Equity, de l’immobilier et des technologies. Nous traitons les dossiers juridiques de manière intègre, ingénieuse, souple et audacieuse pour répondre efficacement aux enjeux propres à chacun de nos clients, quels que soient la taille de l’opération et le secteur d’activité. Pour en savoir plus, contactez-nous.

Unsere Kunden verlassen sich auf unsere erstklassige Beratung, vor allem im Hinblick auf komplexe Transaktionen und High-Stakes-Prozesse. Spezialisiert auf Angelegenheiten der Finanz-, Life-Sciences-, Private-Equity-, Immobilien-und Technologie-Branchen, verwenden wir einen kooperativen und interdisziplinären Ansatz, um Fragen unserer Kunden auch in extremen Spezialsituationen einer Lösung zuzuführen. Sie wollen mehr erfahren? Kontaktieren Sie uns gerne.

Search Other Lawyers
Recherche par Pratique