Data Security & Privacy Law

Data Security & Privacy Law

Smart Legal Counsel in a High-Risk Digital World.

Helping companies prevent, manage, and defend against data-related liability.

Overview

Kightlinger & Gray advises clients on data security compliance, breach response, and cyber liability. We help clients mitigate risk and safeguard sensitive data from incident response to regulatory defense..

We also work closely with insurers and corporate counsel to defend data privacy litigation and implement compliant protocols that align with evolving legal standards.

Shadow Divider

Attorneys Practicing
In This Area

Attorneys Practicing
In This Area

  • John B. Drummy Senior Partner Profile Picture
    John B. Drummy Senior Partner Profile Picture
    John B. Drummy

    Senior Partner

    John Drummy is a Senior Partner in the Kightlinger & Gray Indianapolis office and a member of the firm’s Management Committee. John is also a member of the firm’s Diversity, Equity and Inclusion Board. John is a skilled attorney with over 30 years of experience handling Insurance Coverage and Bad Faith, Professional Liability, Appellate, Data Breach and Securities Litigation matters. John has handled hundreds of appeals, with nearly 100 published opinions.

  • J. Todd Spurgeon Profile Pic
    J. Todd Spurgeon Profile Pic
    J. Todd Spurgeon

    Senior Partner

    Todd Spurgeon is a litigator with significant trial experience. He routinely appears in State and Federal courts, handling a wide range of insurance defense matters. Todd is a member of the American Board of Trial Advocates, which is only open to those with significant jury trial experience and high personal character and reputation. Todd is a board member of the Defense Trial Counsel of Indiana, and is a past president of the Indiana State Bar Association.

Data Security Legal Services

Data Security Legal Services

Data breach response and notification counsel
Defense of data privacy class actions
Regulatory response (HIPAA, GDPR, state statutes)
Vendor contract review and liability shifting
Policy drafting (incident response, data retention, access control)