When data is at risk, the legal side cannot wait.
A security incident raises legal questions fast: what you have to disclose, to whom, and when; what your contracts and insurance require; and how to protect privilege while the facts come in. We handle the legal side of incidents, and the privacy and security terms in your contracts and policies before one happens.
Fee basis: Fixed fees for policies and contract work; a written arrangement for incident response.
In an active incident? Call now.
The first hours of an incident shape what follows: preserving evidence, protecting privilege, and meeting notification obligations. If you are dealing with an active incident, do not wait on the website form. Call the office.
Who we work with.
- Companies dealing with a breach, ransomware, or business email compromise.
- Technology companies answering customer security questionnaires and addenda.
- Businesses whose vendors hold sensitive customer or employee data.
- Companies that need a privacy policy that matches what they actually do.
- Businesses working out whether the Texas Data Privacy and Security Act applies to them.
What we handle
Legal advice and contracts. We do not provide technical security, forensic, or monitoring services; we work alongside the providers who do.
- Incident and data-breach response coordination
- Privilege structure for the investigation
- Breach-notification analysis for individuals, regulators, and customers
- Incident communications with customers, partners, and the public
- Working with forensic firms and cyber-insurance carriers
- Cyber-insurance and indemnity questions after an incident
- Security and privacy terms in vendor and customer contracts
- Data processing agreements (DPAs)
- Security questionnaires and customer security addenda
- Privacy policies and notices
- Texas Data Privacy and Security Act readiness
The work, not a time entry.
Legal coordination of an incident, notification analysis, and privacy policies, DPAs, and security terms that match how you actually handle data.
- 01
Incident coordination
A lawyer directing the legal side of the response: engaging forensic and other providers under privilege, working with your insurer, and keeping decisions documented.
- 02
Notification analysis
Whether and when notice is required, and to whom, under state breach-notification laws, your contracts, and other obligations that apply to the data involved.
- 03
Communications
Notices and messages to customers, partners, and affected people that are accurate and consistent with your legal position.
- 04
Contracts that fit your data
DPAs, security addenda, and questionnaire answers that match your real controls, so you do not promise what you cannot deliver.
- 05
Policies and readiness
Privacy policies and notices, and a plan for the Texas Data Privacy and Security Act and other privacy laws that apply to your business.
What working with us looks like.
- 01
Call, or send the request
For an incident, call. For contracts and policies, send the paper or a short description of your data.
- 02
Scope and fee
Contract and policy work is quoted as a fixed fee. Incident response gets a written arrangement once we understand the situation.
- 03
Act
We direct the legal side of the response, or draft and negotiate the terms and policies.
- 04
Close out
Notifications sent where required, contracts and policies updated, and a record of the decisions made.
Timing depends on the matter, the documents, and how quickly decisions come back. We agree on expectations at the start.
If one of these is true, it is time to talk.
Send a short description through the intake form, or call. The next step is a short call.
- 01You have found, or suspect, unauthorized access to your systems or data.
- 02A vendor has told you it had an incident involving your data.
- 03An enterprise customer sent a security questionnaire or addendum.
- 04Your privacy policy has not been updated since you launched.
- 05You are not sure whether the Texas Data Privacy and Security Act applies to you.
How the fee is set.
Fixed fees for policies and contract work; a written arrangement for incident response.
DPAs, security addenda, privacy policies, and readiness work are quoted as fixed fees. Incident response depends on the facts, so we agree the arrangement with you in writing once we understand what happened.
We are an AI-native firm, which is how we deliver exceptional results and pass exceptional savings on to you. Most matters are handled on a flat or fixed fee.
What clients ask before they call.
Often paired with Cybersecurity & Data Privacy
Technology & SaaS Agreements
SaaS, licensing, MSAs, DPAs, and channel agreements, for vendors and for buyers.
Commercial Contracts
NDAs, MSAs, vendor, supply, distribution, and partnership agreements, negotiated and drafted.
Outside General Counsel
Ongoing counsel from a lawyer who has held the General Counsel seat.
Tell us what is happening. A lawyer will reply.
Use the intake form to describe the dispute, the agreement, or the question. EJ reviews each submission and replies to set up a short call. If a deadline is days away, call instead.