Andrew M. Lewis

Andrew Lewis, CIPP/US, is an attorney in the firm's privacy and security group. He has broad litigation and counseling experience, drawing on years of representing some of the largest technology, retail, and media companies in the country to provide exceptional counsel to clients on all matters regarding privacy, cybersecurity, data breaches, and related investigations.

Andrew advises both small and large companies on strategies to identify and mitigate their most complex information security challenges. He specializes in data breach counseling, including pre-litigation services such as cease-and-desist letters, forensic reviews, summary reports, and coordination with third parties on returning sensitive information.

An effective solutions-oriented attorney, Andrew has broad knowledge of data security laws and regulations and how they intersect with other areas of the law, including copyright, trademark and counterfeit enforcement, internal investigations, contracts, and general commercial matters. He has extensive experience in state and federal court, handling case strategy, motion practice, depositions, discovery, witness interviews, expert reports, and settlements. He also has experience in class actions and mass arbitration, previously serving as the lead attorney in arbitration hearings and settlement negotiations, as well as in international, federal, and internal investigations regarding privacy and security issues. On behalf of clients, he has investigated and responded to various types of security incidents and worked with their technology and business development teams to institute changes to privacy policies, terms of service, ad platforms, data flows, payment systems, and other improvements.

Also trained in economics, political science, and public policy, Andrew was an intern on Capitol Hill in Washington, D.C., and worked in legal and judicial consulting before practicing law.