Brandon Reilly is the leader of Manatt’s privacy and data security practice and is recognized nationally for his work in cyber law and as a “Top 40 Under 40” lawyer in California. A trusted go-to advisor on privacy and data security issues for a sophisticated client base, Brandon is skilled at developing business-focused privacy and security frameworks aimed at mitigating future enforcement and litigation risk. His practice includes a wide array of consumer protection and privacy matters, including data privacy, security compliance and procedures, and data breach responses.Brandon has experience advising and representing Fortune 500s, multinational corporations, emerging companies and nonprofits across a range of industries, including technology, e-commerce, consumer products, advertising and digital media, health care, financial services/fintech, entertainment, leads generation, professional services, real estate, energy, manufacturing, infrastructure, insurance, education and cannabis.In the compliance area, Brandon advises clients on proactively orienting their operations to all manner of federal, state and international laws and regulations, including the CCPA, GDPR, the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), HIPAA, CalOPPA, the FTC Act, FCRA, GLBA, the NYDFS Cybersecurity Regulation and the California Shine the Light Law, as well as industry-specific standards such as the PCI Data Security Standard (PCI DSS). He has proven to be an invaluable asset to his clients, whether improving regulatory compliance programs, building privacy-centric business lines, designing and managing enterprisewide data mapping projects, developing privacy and security policies and procedures, constructing data subject request processes and procedures, negotiating vendor and partner contracts or contracts involving data transfers, or performing due diligence with respect to prospective mergers and acquisitions.In the incident response area, Brandon assists clients with security incident investigation, containment and mitigation as well as management of data breach responses, and he assists impacted entities before and during litigation, regulatory inquiry and government enforcement. He has counseled clients on incidents involving ransomware and other malware, botnet and other automated attacks, social engineering attacks, business email compromises (BEC), insider threats, independent security researchers and black and gray hat hackers, and other fraud and identity theft schemes.