Jake Bernstein

Background

About Jake Bernstein

Data Protection and Cybersecurity attorney with regulatory and enforcement background and a high degree of technical computer knowledge. I help clients figure out their cybersecurity and privacy risks and how to manage those risks while staying focused on business needs and practical realities. My practice consists of three primary areas: 1. Compliance related to Cybersecurity and Privacy Laws, Regulations, and Risks 2. M&A Due Diligence for Privacy and Cybersecurity 3. Transactional support involving data protection, privacy, and security in all industries I also provide breach counseling, litigation consulting, and general advice related to businesses in the technology sphere. Certified Information Systems Security Professional and Certified Information Privacy Professional (United States).** Expertise in cybersecurity frameworks and methodologies: ISO27001, ISO27002, NIST Cybersecurity Framework, NIST Special Publication 800-53, NIST SP 800-171, CMMC, SOC2 audits * Expertise in privacy laws and regulations: CCPA/CPRA, GDPR, NYDFS Cybersecurity Rule, Virginia Consumer Data Protection Act, Colorado Privacy Act, Utah Privacy Act, Connecticut's privacy legislation, SEC rules and proposed regulations, etc.* Additional Expertise: Advertising & Marketing compliance, FTC and consumer protection regulatory compliance, particularly related to online advertising, endorsements, CAN-SPAM, Telephone Consumer Protection Act (TCPA), etc. Finally, I am the co-host of The Cyber Risk Management Podcast, a bi-monthly podcast that discusses cyber risk management from the perspective of a CISO and practicing cybersecurity attorney. Join our audience at Certified through ISC² and IAPP respectively. The Washington State Supreme Court does not recognize certification of specialties in the practice of law and this certification is not a requirement to practice law in the state of Washington.