Christian M. Auty

Christian Auty advises clients on the full lifecycle of data privacy and cybersecurity matters, from regulatory compliance and risk management to breach response and cross-border data governance, as well as on data privacy and governance considerations in emerging technologies such as artificial intelligence and blockchain.

Christian works with clients across a range of industries, including healthcare, financial services, insurance, and retail, to develop practical, business-aligned strategies for managing data-related risk.

Christian counsels clients on compliance with a broad spectrum of U.S. and international privacy laws. His work includes advising on the Health Insurance Portability and Accountability Act (HIPAA), state law, and interoperability and information sharing issues for healthcare data, the Gramm-Leach-Bliley Act (GLBA) for financial institutions, and the Children’s Online Privacy Protection Act (COPPA) for online services directed at children. He also helps multinational organizations navigate the European Union's General Data Protection Regulation (GDPR), as well as emerging U.S. state-level laws.

In addition to regulatory compliance, Christian has extensive experience guiding clients through cybersecurity incidents and breach response. He regularly serves as breach coach for global organizations, leading responses to dozens of data breaches each year and advising on regulatory investigations and enforcement actions. His litigation background informs a pragmatic, risk-aware approach to incident response and regulatory scrutiny.