Elliott Siebers

As a former state privacy regulator, Elliott brings valuable insight to help his clients identify and stay ahead of enforcement trends. He works with them to identify and mitigate risks to their sensitive data and implement and comply with industry security standards and state and federal requirements, including through data-mapping exercises and the development of information security programs and incident response plans.

In the event of a security incident, Elliott handles all aspects of the response, including investigation, containment, mitigation, and management. He also advises on choosing vendors; notifying affected individuals, regulators, and stakeholders; and creating a PR strategy.

Elliott helps clients address requirements under constantly evolving privacy laws and regulations, including the California Consumer Privacy Act (CCPA), the European General Data Protection Regulation (GDPR), the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCPDA), and Colorado Privacy Act (all effective in 2023), and other sector-specific laws.

Elliott drafts and negotiates complex agreements involving data, including SaaS, adtech, and technology agreements, and he works with clients to develop internal and consumer-facing policies and procedures, including privacy policies and terms.