Theodore P. Augustinos

Ted Augustinos advises clients in various industries on privacy and data protection, cybersecurity compliance and incident preparedness, and breach response. He is a member of the Steering Committee of the Firm’s Privacy and Cybersecurity Practice Group, and leads the group's initiatives focused on the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), and New York DFS Cybersecurity Regulation, and its Incident Response Team. He is a Certified Information Privacy Professional, accredited by the International Association of Privacy Professionals. Ted serves as Co-Chair of the World Law Group’s Data Protection and Privacy Group, and as Managing Partner of the Hartford, Connecticut office of Locke Lord.

Ted’s experience includes:

• Advising on emerging legal and regulatory requirements related to the collection, use and protection of information, including the New York DFS Cybersecurity Regulation and the California Consumer Privacy Act
• Designing and implementing privacy and data protection policies and incident response plans to comply with federal and state laws and requirements of the payment card industry
• Drafting and negotiating representations, warranties and indemnities, related to privacy and data security issues for acquisition agreements and vendor contracts
• Developing programs to manage cybersecurity risks presented by service providers, including privacy and data security addenda
• Advising on privacy, data transfer, data protection and cybersecurity issues related to InsurTech projects, including creation of data lakes and use of anonymized and aggregated data
• Responding to data breaches, including directing forensic investigations, conducting legal and regulatory analysis, coordinating responses to customers, law enforcement, regulators and the public, preparing required notifications, and responding to follow up inquiries from regulators
• Directing forensic investigation, data mining and analysis of incident involving health records to determine whether a data breach occurred at large health care facility, and at vendor to multiple physicians' practices
• Advising national and local nonprofit organizations on issues related to loss of donor credit card information and personal information of employees