Member • Lead, Privacy and Data Security
Devin has spent more than two decades focused on data security and privacy law. He advises businesses and public entities on privacy compliance, data breach response, AI governance, and complex commercial litigation.
Devin began working on data breach litigation in 2005, representing banks seeking to recover credit card replacement costs from retailers whose security failures exposed customers’ account data. His clients won some of the first data breach cases to succeed in U.S. federal courts, including one of the earliest appellate decisions to recognize a right to recover breach-related damages.
Today, Devin spends much of his time helping clients build and maintain their data protection programs. He drafts and reviews data security policies, privacy notices, incident response plans, and vendor agreements. He advises on compliance with the patchwork of U.S. state privacy laws, including the California Consumer Privacy Act and its progeny, as well as the EU General Data Protection Regulation and sector-specific requirements like HIPAA. When breaches occur, he manages the legal response: investigating what happened, coordinating notification obligations, engaging with regulators, and working to limit exposure.
Devin also advises clients on the privacy and regulatory dimensions of artificial intelligence. He counsels organizations adopting AI tools on data governance, algorithmic transparency, and compliance with emerging AI regulations.
A recognized thought leader who regularly speaks and writes about privacy and data security topics, Devin holds both the Certified Information Privacy Professional/United States (CIPP/US) and Certified Information Privacy Professional/Europe (CIPP/E) designations from the International Association of Privacy Professionals, reflecting his familiarity with both U.S. and European privacy frameworks.
Outside of his privacy practice, Devin is an experienced trial and appellate litigator. He defends class actions, particularly those involving consumer protection statutes, civil rights claims, and employment practices, and handles a range of commercial disputes involving contracts, intellectual property, and defamation. He also represents municipalities, state legislators, and media companies in constitutional litigation.
Explore recent thought leadership, news, and other updates.
A serial pro se litigant, Vivek Shah, has sent demand letters threatening litigation to thousands of businesses across the country, alleging violations of the California Invasion of Privacy Act (CIPA). If your business has received one of these letters, here is what you need to know. Key takeaways: Understanding CIPA and the demand letters In […]
The Maryland Online Data Privacy Act (MODPA) introduces some of the most comprehensive state-level privacy requirements in the country. Effective October 1, 2025, with enforcement beginning in April 2026, MODPA significantly expands the obligations for businesses that collect or process the personal data of Maryland residents. If your organization falls under these thresholds, early preparation […]
It’s that time again for the annual McNees Tax Seminar. This seminar is a must-attend event for accountants, in-house tax personnel and private and government tax attorneys. Speakers will touch on both Pennsylvania tax issues and federal tax issues. Additionally, representatives from Pennsylvania’s tax appeal agencies will be giving updates on their respective offices during […]
Preparing for enforcement and beyond In the final part of our series on the Maryland Online Data Privacy Act (MODPA), we look ahead to enforcement and beyond. With MODPA taking effect on Oct. 1, 2025, and enforcement beginning April 1, 2026, businesses must not only prepare for implementation but also build sustainable privacy programs that […]
Represents healthcare providers and organizations in corporate transactions. Advises on contracts, negotiations, privacy compliance, and disputes.
Represents businesses on IP protection and licensing. Advises on trademark, copyright, franchising, technology, and artificial intelligence matters.
Defends discrimination claims, advises on labor relations, counsels on union matters, and assists with immigration issues, including DHS and ICE investigations.
Advises healthcare providers on transactions, compliance, and corporate matters, including acquisitions, affiliations, governance, and regulatory matters.
