We believe in transparency and predictability in legal fees. We also enjoy the freedom to customize fees for clients as they would prefer.

• Retainer arrangements of all kinds, from fractional in-house counsel to overflow contract work.

• Alternative fee structures designed around client needs.

• Fixed-fee projects, such as drafting or conducting:

  • Data privacy, information governance, and cybersecurity policies and procedures

  • Incident response tabletop planning and facilitation. Training sessions for boards, executives, and employees on cybersecurity and privacy obligations

  • Risk assessments: Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs)

  • Vendor and third-party security due diligence reviews

  • Contract drafting and negotiation of Data Protection Agreements (DPAs) and security addenda

  • Breach notification playbooks tailored to GDPR, CCPA, HIPAA, and state statutes

  • Readiness reviews for regulatory examinations (e.g., NY DFS Cybersecurity Regulation, SEC Cybersecurity Rule)

  • Gap analyses against frameworks such as NIST Cybersecurity Framework and ISO/IEC 27001