Data Privacy & Cybersecurity

Having a trusted partner to help keep you compliant and your data secure is imperative to the ongoing success of your operations. At Han Santos, we have a team of data privacy and cybersecurity lawyers with years of experience and industry leadership to do just that.


The experienced privacy and cybersecurity attorneys at Han Santos


Deliver extensive experience in privacy regulations at the state and federal levels:

  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA) and other states’ consumer privacy laws
  • U.S.A. state student privacy laws
  • Family Educational Rights & Privacy Act (FERPA)
  • General Data Protection Regulation (GDPR)

Serve our industry as members of professional and standard-setting organizations:

  • International Association of Privacy Professionals (IAPP)
  • Accredited Standards Committee X9 (ANSI)
  • Association of Test Publishers (ATP)

Maintain certification in all relevant areas:

  • Fellow of Information Privacy (FIP)
  • Certified Information Privacy Professional (CIPP/US)
  • Certified Information Privacy Manager (CIPM)

Privacy Practices

Core services



Our advisory services help organizations across industries navigate the complex and ever-changing landscape of privacy law, minimizing risk with a strong privacy strategy.

  • Privacy and Security Program Development and Implementation
  • Privacy and Security Audits
  • External Chief Privacy Officer Services
  • Standards Development


Maintaining compliance and adhering to constantly shifting standards is challenging for any organization. We can help you avoid the financial and reputational costs of falling out of compliance.

  • Regulatory
  • Privacy and Security Program Development
  • Management and Audits
  • Cookie consent management


Whenever data is shared, there’s a risk of exposure. Data privacy—especially in highly regulated industries—can be a minefield of rules and requirements.

  • Data Privacy and Security Provisions Contract Review
  • Data Processing Agreements Development
  • Review and Negotiations
  • K12 School District Student Privacy and Security Agreements Review


  • Security & Privacy
  • Standards (X9 and ISO)
  • Age Verification (tokenization, privacy)
  • Review of Processor Agreements
  • Retail Technology


  • Business Consulting
  • Applications for Secure Tests and Related Issues
  • Impacts of Cybersecurity/Privacy
  • Certification/Licensure
  • Credentialing

Privacy Law Environment

The privacy law environment is complex and constantly evolving, and for a typical business owner, it can feel impossible to keep up. Businesses that fail to adhere to the most current privacy laws and standards standards can compromise their clients, open themselves to liability, and fall victim to other legal consequences. A proficient partner can help you understand your obligations and your rights.

Han Santos has the background needed to navigate the nuances and anticipate challenges, ensuring your business is prepared to adhere to developing standards. Our dedicated team of industry-leading attorneys can design, implement, and manage a custom privacy, security, and compliance strategy to protect your business.

We partner with companies of all sizes to evaluate their data security and privacy compliance programs, and execute organization-wide risk assessments to isolate gaps and appreciate each business’s specific circumstances. We’re committed to fully understanding every client’s individual context, and believe that unique challenges require tailored solutions. We offer real, actionable guidance and precise, focused recommendations based on the latest developments in relevant law.

“The support and expertise of Han Santos has allowed us to concentrate on building our business, so we can confidently expand and grow. The team has been very flexible in working with us to put together specific legal documents for some niche scenarios, and we appreciate the fantastic service from the entire firm.”
– Chanks Arumugam, Co-Founder, DigiSignals Inc