Alexander R. Cox

Alex Cox advises clients in various industries on privacy and cybersecurity issues, from implementing information security and incident response programs to addressing compliance questions and providing guidance in a variety of contexts, for clients ranging from startups to large, highly regulated organizations.

Alex is the Chair of the Executive Committee of the Connecticut Bar Association’s Young Lawyers Section on Cybersecurity and Technology and is a CIPP/US Certified Privacy Professional. His technical data analytics background informs his advice to clients.

Alex's experience includes:

• Advising clients on compliance with the New York Department of Financial Services (NYDFS) Cybersecurity Regulation and other insurance data security laws modeled on the NAIC Insurance Data Security Model Law
• Developing and implementing written information security programs and incident response plans to comply with various privacy and security laws
• Responding to data breaches, including directing forensic investigations, data mining, analysis of obligations, and drafting of notices and other communications with insurers, customers, regulators and affected individuals
• Assisting with cybersecurity and privacy issues as they occur as part of the process of a merger or acquisition
• Reviewing and modifying data security and privacy addenda and provisions in agreements for various contracting arrangements
• Advising clients on consumer privacy laws, such as the California Consumer Privacy Act (CCPA), upcoming California Privacy Rights Act (CPRA), and similar laws in Virginia and Colorado
• Advising clients on biometric privacy issues in contexts from collection to security as informed by available law, including the Illinois Biometric Information Privacy Act and other biometrics laws in Texas, New York, Washington and elsewhere
• Providing guidance on issues related to processing precise geolocation information
• Drafting privacy policies and terms of use for websites and services across industries, including SaaS, financial services, retail, design, health care and others, covering North American and European legal compliance issues
• Advising clients on compliance with the HIPAA Privacy, Security and Breach notification rules
• Providing guidance on the EU and UK versions of the GDPR
• Counseling clients on various cybersecurity frameworks, such as NIST and CIS