Elizabeth K. Bess Hinson

Elizabeth ("Bess") Hinson is a privacy and cybersecurity attorney in Holland & Knight's Atlanta office. Ms. Hinson focuses her practice on cyber and data risk management and governance, breach preparedness and response, crisis management and global data privacy compliance.Ms. Hinson represents clients at all stages of incident response from investigation, notification, remediation, managing privacy class action risks, and defense of litigation and regulatory inquiry. She regularly counsels clients on cross-border data flows and navigating conflicts between foreign privacy laws and U.S. compliance obligations.In addition, Ms. Hinson oversees and coordinates European Union (EU) General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) compliance assessment and implementation programs for clients. She advises clients in various industries on privacy matters, including information governance and data management, online advertising and internal compliance policies as well as consumer policies, including website and mobile application policies, vendor management, blockchain, and privacy and security-related compliance strategies and programs. She also guides clients on risks and potential liabilities associated with privacy and data security practices in mergers and acquisitions (M&A) and technology transactions. compliance obligations. In addition, Ms. Hinson oversees and coordinates European Union (EU) General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) compliance assessment and implementation programs for clients. She advises clients in various industries on privacy matters, including information governance and data management, online advertising and internal compliance policies as well as consumer policies, including website and mobile application policies, vendor management, blockchain, and privacy and security-related compliance strategies and programs. She also guides clients on risks and potential liabilities associated with privacy and data security practices in mergers and acquisitions (M&A) and technology transactions.