Sandy Garfinkel

Sandy Garfinkel co-chairs McNees’ Privacy & Data Security Group and is a nationally recognized authority on data breach response and privacy compliance. He advises clients across industries on preparing for and responding to data breaches, managing regulatory investigations and navigating privacy laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). Sandy regularly speaks and trains on cybersecurity issues and helped develop Diligent Institute’s Cyber Risk & Strategy Certification program. In addition to his privacy work, he maintains an active business litigation practice, with a focus on the hospitality sector and public transit law.