Today’s globalized economy is sparkled by an interest in the collection, processing and exchange of sensitive personal information for commercial purposes. In an age of continuing innovation, the protection of sensitive personal data has become an area of major concern for many businesses.

Even though privacy regulation within the private sector is limited in Puerto Rico as there is no regulating authority in charge of overseeing the collection, use and dissemination of personal information, the ever present risks posed by the unauthorized use, transfer or disclosure of personal information along with the heightened public attention and government scrutiny have led a growing number of local and multinational companies to turn to our data privacy and cybersecurity group for help in adopting sound privacy and security practices, ensuring regulatory and legal compliance, and protecting their competitive advantage.

AMG’s Data Privacy & Cybersecurity practice is uniquely positioned to help companies, in an increasingly complex field, in achieving and maintaining compliance with privacy law requirements and agency regulations through a talented pool of attorneys with a sophisticated understanding of today’s modern privacy issues. The group draws on the experience of renowned attorneys in the firm’s other leading practice areas, particularly the Labor and Employment and Corporate law groups.

• Our clients:

  In recent years AMG’s Data Privacy & Cybersecurity team has successfully counseled an impressive roster of clients comprising the likes of Liberty Mutual Insurance Company, TOUS, Grupo Novus, Allegion PLC, Philips Medical Systems, Toyota Credit de Puerto Rico and Infotech Aerospace Services, among others, on multiple privacy issues related to the scope and extent of sharing personally identifiable information for commercial purposes; data collection and management practices of employee data; security breach regulations, the implementation of e-contracting procedures; negotiation of vendor contracts for information use; and business associate agreements.

  AMG’s data privacy group aims to provide practical advice and costeffective solutions that helps clients effectively manage their information, while achieving their business goals. Aware that data is a critical asset for its clients, it also strives to mitigate the risks of collecting and processing information in developing privacy solutions.

Areas of Experience:

Some of the areas in which AMG’s Data Privacy & Cybersecurity practice group renders its clients advice and assistance include:

1. Counseling of and compliance with federal and state laws in all substantive areas of privacy including, but not limited to, financial, health, consumer, educational and employment privacy. E.g. Gramm-Leach-Bliley Act, HIPAA, Fair Credit Reporting Act, Fair and Accurate Credit Transactions Act and CAN-SPAM Act.
2. General Data Protection Regulation (“GDPR”) Guidance
3. Drafting, development and implementation of privacy policies and notices.
4. Drafting and negotiation of vendor contracts.
5. Reporting data security breach to affected consumers and government agencies.
6. Conduct privacy assessment or audits of an organization’s compliance with its privacy policies/procedures and information security due diligence.