Privacy & Cybersecurity

Companies that use software, systems, and processes to collect, store, and transform personal data need to be able to navigate the complex and growing regulatory landscape of federal, state, and international laws, rules, and requirements. Suffering a data breach or data loss, or failing to comply with various regulations (whether that business is aware of them or not) can be disastrous.

Eric Ludwig has earned credentials through the International Association of Privacy Professionals (IAPP) as a Certified Information Privacy Professional/United States (CIPP/US) and a Certified Information Privacy Manager (CIPM). Earning CIPP/US demonstrates a strong foundation in U.S. private-sector privacy laws and regulations, including an understanding of legal requirements for responsible transfer of sensitive personal data to and from the U.S., the EU, and other jurisdictions. CIPM reflects understanding of privacy program governance and skills necessary to establish, maintain, and manage a privacy program across all stages of its operational life cycle.

He and the attorneys at Ludwig APC offer a comprehensive suite of privacy and cybersecurity services for businesses, including . . .

• Development of data management programs to cover collection, storage, use, retention, and erasure of data
• Programs and policies to ensure compliance with all applicable state, federal, and international regulations
• Monitoring current, new, and proposed regulations and laws related to industry-specific segments
• Development of policies detailing client response to cybersecurity threats and data breaches
• Managing a company’s defense against privacy and cybersecurity claims and class action suits
• Engaging in due diligence on privacy and cybersecurity issues related to corporate mergers, downsizing, acquisitions, and other such transactions
• Advising companies on employee cybersecurity and privacy best practices and policies, including policies related to trade secrets, employee theft of intellectual property, employee social media activity, access to customer data, and more.
• Drafting/developing privacy policies covering company websites, blogs, and ecommerce.