Herzog's Technology & eCommerce Regulation Department is a recognized market leader in its field. The team is led by domain experts who possess a unique set of vital, interdisciplinary and global regulatory advisory skills, and are uniquely positioned to advise a range of clients, including leading multinational technology companies as well as start-ups and disruptive technologies vendors, on applicable regulatory and compliance considerations in numerous technological areas.

We understand that the regulatory exposure and scope of required attention of almost any company operating in the digital and technological sphere are much wider than one specific jurisdiction or legal discipline. As our clients are often on the forefront of this ever-evolving landscape, we further understand the impact of industry trends and compliance demands on our clients’ businesses. Therefore, our team possesses in-depth knowledge of the increasing volume of regulations, enforcement actions, legislative and industry trends in a myriad of jurisdictions, digital platforms and leading self-regulatory guidelines. This enables our team to offer practical, holistic and comprehensive solutions for complex situations often presented by innovative technologies and disruptive business solutions, providing “hands-on” support to our clients on the strategic, corporate and operational aspects of their business, with the aim of mitigating our clients’ legal and business risks.

We assist our clients in ensuring they have appropriate measures in place, in order to manage their data protection and cyber risks and to respond effectively to incidents, while mitigating potential regulatory risks.

Our assistance includes:

• Advice on the implementation of technical and organizational measures for risk mitigation and compliance;
• Compliance with evolving regulations and reporting obligations;
• Cyber corporate governance;
• Incident response plans and risk assessments;
• Data breach and cyber incidents response and management;
• Training for employees and management;
• Advice on sector specific cyber regulations (e.g., banking, financial institutions, critical infrastructure, cyber products);
• Compliance counseling and breach prevention;
• Advising on requirements in privacy and security policies;
• Cyber insurance policies;
• Data destruction and disposal practices;
• Agreements with security, forensic and incident response vendors;
• Vendor and supply chain management;
• Cyber and security due diligence and warranty negotiation for M&A and strategic transactions.