Corporate & Securities | Data Privacy & Cybersecurity
Practical Privacy. Durable Security.
Compliance that works in the real world.
Privacy Programs that Work in Practice
As a recognized data privacy law firm, we combine legal compliance with real-world production execution to help companies build privacy and security frameworks that match risk, regulation, and reality.
Our team:
- Designs compliance programs for GDPR, UK, Canadian, and U.S. state laws (CCPA/CPRA and beyond) with experienced GDPR/CCPA attorneys
- Drafts policies, data maps, and DPIAs aligned to product functionality and risk tolerance
- Advises on vendor management, data processing agreements, and cross-border transfers
- Prepares incident response legal support and prepares breach response plans
- Guides cybersecurity compliance efforts through internal audits and readiness reviews for evolving regulatory expectations

Meet The Team
A national team of proven experts that bring business, litigation, and regulatory expertise.
Lindsey Altmeyer
Jonathan F. Atzen
Gardner Bell
Alfred Bridi
Charles Caliman
Patrick Diehl
M. Sidney Donica
Jeff Drake
Amy Duvanich
Brian Elliott
Eric Ferraro
Steven Forbes
Marissa Fox
Jenna Geuke
Samuel Gintel
Benjamin Golopol
Christopher Grewe
Tyler Hayden
Brian Hicks
Morgan Hines
Aliona Ierega
Dori V. Karjian
Michael Keskey
Charles R. “Chuck” Kraus
Nancy Lee
Jefferson Lin
Justin McAnaney
Aaron McKenney
Lauren Mellen
Doug Mitchell
Katy Reamon
Channah Rose
Cullen Schlievert
Kristen Smith-Dayley
Thomas Soave
Holden Stein
Aaron Swerdlow
Emma Thompson
Cary Ullman
Scott Wiegand
Maria Yuen

Why Clients Choose Scale for Data Privacy & Cybersecurity Counsel
“Now, I feel like I’ve won the lottery — independence plus a national team.”
“My advice? Bet on yourself. You’ll be surprised how happy you are when you do.”
“At Scale, I don’t wait for someone to promote me. If I want a raise, I give myself a raise.”
“It was powerful to realize I had helped lead the biggest transactions of ten different companies in just one year at Scale.”
“Scale supported us from the earliest stages during YC and through becoming a proper Series A company.”
“Scale meets clients where they are with modern tech and a Silicon Valley approach to growth, timeliness, execution, and the general practice of law.”
“As Sundae’s outside general counsel, Scale provides operational and product advice with a business savvy I have not experienced with any other law firm.”
“Our commitment to our creators drives everything we do, and it is what led us to partner with Scale to help meet the evolving needs of our customers.”
“Over the past year, we’ve had a number of high-stakes opportunities arise, and Scale’s legal team has been endlessly flexible and responsive in helping us meet each of these opportunities head-on.”
“We’re committed to bringing Alinea’s mission to fruition, and grateful to have Scale guiding us on building, financing and scaling for growth. They are truly a startup’s best friend.”
“Scale is a vital extension of my leadership team and I absolutely love working with them.”
“Honest, reliable, trustworthy and defenders of justice. Will use them time and time again!”
Representative Matters
Clients get clear, defensible steps that pass exams and support business momentum.
Leading VC-Backed EdTech SaaS Platform
Legal Challenge
Significant security incident involving sensitive student data triggered immediate regulatory, contractual, and reputational risk. Required rapid containment, coordinated disclosures, and precise communication management across multiple stakeholders.
Scale Solution
Led incident-response triage and coordinated with internal security teams and external forensics consultants. Advised on federal and state disclosure requirements and regulatory notifications. Reviewed and refined all internal and external communications, including investor updates, customer notices, and responses to media inquiries.
Outcome
Contained the incident, ensured compliant notifications, and prevented regulatory escalation. Preserved customer trust through disciplined communications and reduced reputational damage. Established a repeatable incident-response framework for future events. Provided ongoing embedded privacy and cybersecurity counsel.














































