Paul Hastings continues to expand its Chambers ranked Data Privacy and Cybersecurity Group by welcoming Michelle Reed as a partner. Aaron Charfoos, Global Chair of the Data Privacy and Cybersecurity Group, and Jeremy Berkowitz, Senior Director in the Privacy & Cybersecurity Solutions Group, had a chance to speak with Michelle about her background, the unique solutions she can provide to Paul Hastings’ clients, as well as developments to watch in the coming months.

1. Michelle, first, welcome to the firm. Tell us a little bit about your background?

   Thanks, Jeremy and Aaron. I’m so excited to be here. I arrived at Paul Hastings after more than two decades at another AmLaw 50 firm, where I was co-leader of the cybersecurity, privacy, and data protection practice. I’ve done a wide range of work, including high profile data breaches, defending data breach class actions, and advising on complex privacy compliance issues for Fortune 100 companies.

2. What kind of skills do you think are most relevant to our privacy and cybersecurity clients?

   Cybersecurity and data privacy is one of the most fun practice areas because you can go to sleep one night and wake up the next morning (or sometimes be woken in the middle of the night!) with an entirely new cybersecurity threat or regulatory regime. Because of the dynamic nature of this practice, lawyers must have incredible depth of knowledge and agility to be able to pivot to address new laws or new business needs. Skills such as depth of knowledge in cyber/privacy law, understanding of technology and business needs, and being able to translate between legal and technical audiences so that the Board of Directors can truly understand risk are the most relevant to our clients.

3. What are the key areas/trends of data privacy and cybersecurity that you are looking for in the second half of 2024?

   Cybersecurity threats will continue to evolve, with a major focus on supply chain vulnerabilities that can impact numerous companies at once. As the new SEC cyber rules continue to be interpreted by public companies, we will have a window into cyber risk that we didn’t have even a year ago.

   Online tracking technologies will be attacked through innovative uses of anti-wiretapping statutes, making every company with a website or a chatbot at risk of facing class action litigation.

   Evolving nature of Artificial Intelligence (AI), including generative AI, will continue to get the attention of regulators worldwide. Privacy and cybersecurity are key components of compliance and companies will need to carefully address their own governance related to use of AI and understand their vendors’ use of AI, ensuring contractual provisions are protected. And the integration of AI into tracking devices can have significant implications under biometric laws, privacy laws, and cybersecurity laws.

4. What excites you most about joining Paul Hastings?

   Paul Hastings has a tremendous bench strength across every practice and industry and a global platform that enables us to truly have worldwide coverage for company’s most sensitive issues, whether it be data breaches or privacy risks. The firm is led by the finest leaders who understand the business of law and how to deliver the full spectrum of high-quality legal services to our clients. The Paul Hastings cybersecurity and privacy team here have depth and scale that allow us to handle very complex multi-jurisdictional issues. And perhaps the cherry on top is that everyone here is so collegial—I have felt welcome from my first day and am grateful for the incredible collaboration that has occurred even in my first month!