Andrew Epstein focuses his practice on data privacy and Information Security across various industries. He takes a proactive approach to data privacy to help protect clients’ information through risk management and adherence to data protection laws. Epstein also has experience responding diligently to data security incidents and breaches. Epstein counsels clients on data risk management and how to implement strong data security practices. He advises clients on information-law issues related to products and services, cross-border data transfers, contract negotiations, consumer notices, and vendor management. Additionally, Epstein guides clients through the lifecycle of reacting to an Information Security incident, which includes identifying, investigating, and responding to the incident.