Alexander R. Cox

Alex Cox advises clients in various industries on privacy, cybersecurity and AI issues, from implementing information security and incident response programs to addressing compliance questions with deploying complex data-intensive products and providing guidance in a variety of other contexts, for clients ranging from startups to large, highly regulated organizations.

Alex is the Chair of the Executive Committee of the Connecticut Bar Association’s Young Lawyers Section on Cybersecurity and Technology and is a CIPP/US Certified Privacy Professional.

Alex's experience includes:

• Advising clients on compliance with the New York Department of Financial Services (NYDFS) Cybersecurity Regulation and other insurance data security laws modeled on the NAIC Insurance Data Security Model Law
• Developing and implementing written information security programs and incident response plans to comply with various privacy and security laws
• Providing guidance on managing compliance and contracting issues around the use of machine learning, generative AI and other similar tools
• Responding to data breaches, including directing forensic investigations, data mining, analysis of obligations, and drafting of notices and other communications with insurers, customers, regulators and affected individuals
• Assisting with cybersecurity and privacy issues as they occur as part of the process of a merger or acquisition
• Reviewing and modifying data security and privacy addenda, AI processing addenda and provisions in agreements for various contracting arrangements
• Advising clients on consumer privacy laws, such as the California Consumer Privacy Act (CCPA) and similar laws in Connecticut, Texas, Virginia and elsewhere 
• Advising clients on biometric privacy issues in contexts from collection to security as informed by available law, including the Illinois Biometric Information Privacy Act and other biometrics laws in Texas, New York, Washington and elsewhere
• Providing guidance on issues related to processing precise geolocation information
• Drafting privacy policies and terms of use for websites and services across industries, including SaaS, financial services, retail, design, health care and others, covering North American and European legal compliance issues
• Advising clients on compliance with the HIPAA Privacy, Security and Breach notification rules
• Providing guidance on the EU and UK versions of the GDPR