Overview
John Michels is an associate in the Privacy and Cybersecurity practice of Paul Hastings, and is based in the Firm’s Chicago office. John focuses his practice on data breach investigation and response, privacy litigation, and regulatory investigations. John’s experience includes managing large-scale cybersecurity incident investigations, responding to governmental subpoenas and investigative demands, and advising clients on compliance with privacy laws such as the EU’s General Data Protection Directive (GDPR), the California Consumer Privacy Act (CCPA), and the Illinois Biometric Information Protection Act (BIPA). John also has litigated numerous actions in federal court under the Fair Credit Reporting Act (FCRA). Prior to law school, John was a combat survival, enemy evasion, interrogation resistance, and captivity escape specialist for the U.S. Air Force.
During his eight years of service, he occupied a variety of leadership roles involving operational planning and personnel recovery coordination.
Education
- Northwestern Pritzker School of Law, J.D. (cum laude), 2018
- American Military University, B.A. (with honors), 2014
Representations
- Represented a Fortune 500 manufacturing company in the investigation of website cyberattacks targeting consumer payment card data.
- Conducted an investigation into a data breach at a global retailer, and represented the company in a related Federal Trade Commission (FTC) investigation.
- Represented a national credit reporting bureau in federal litigation related to alleged violations of the Fair Credit Reporting Act (FCRA).
- Advised a multinational financial services company on compliance with biometric information protection statutes.
- Counseled a global access solutions and products company on the development of its privacy and data protection program, including compliance with the European Union’s General Data Protection Regulation (GDPR).
- Represented a computer hardware company in response to an alleged supply chain cybersecurity attack, and in a related investigation by the Securities and Exchange Commission (SEC).
- Represented eight veterans of the armed forces in federal litigation against predatory lenders under the Racketeer Influenced and Corrupt Organizations Act (RICO).
news
- Paul Hastings Advised The Riverside Company in Sale of PFB Holdco, Inc. Plasti-Fab Segment to Carlisle Companies Incorporated - October 21st, 2024
- Paul Hastings Advised The Riverside Company in its Investment in U.S. Cabinet Depot - March 13th, 2024
- Paul Hastings Advises Madison Industries in $226 Million Purchase of CAE Healthcare - October 25th, 2023
- Paul Hastings Advised Industrial Growth Partners in the Sale of Des-Case - September 7th, 2023
- Paul Hastings Advised Micronics Engineered Filtration Group in Acquisition of AFT - July 28th, 2023
- Sensata Technologies to Acquire Dynapower - May 9th, 2022
insights
- NYDFS Releases Major Update to Part 500 Cybersecurity Requirements for Financial Services Companies - November 2nd, 2023
- NYDFS Releases Major Update to Part 500 Cybersecurity Requirements for Financial Services Companies - November 2nd, 2023
- Proposed FAR Cybersecurity Requirements Will Add New Obligations for Contractors - October 25th, 2023
- “FAR” Reaching Consequences: Proposed FAR Cybersecurity Requirements Will Add New Obligations for Contractors - October 25th, 2023
- The Board is Set: Preparing for the SEC’s Upcoming Cybersecurity Rules - May 15th, 2023
- The New York Department of Financial Services Cybersecurity Rules — What Companies Need to Know - October 11th, 2022
- Data Privacy and Cybersecurity New Laws and Regulations Report - October 3rd, 2022
- California Is Considering Its Own Version of Illinois’ BIPA - March 8th, 2022
- Illinois Supreme Court Rejects Potentially Key BIPA Preemption Argument - February 8th, 2022
- The Supreme Court and the TCPA: What Companies Should Know About the Recent Ruling - April 8th, 2021
- Recent CFAA Decision Deepens Circuit Split; SCOTUS Resolution on the Horizon - October 14th, 2020
Involvement
- Young Privacy Professional, Chicago Chapter of the International Association of Privacy Professionals