Colin Black is a member of the firm’s privacy and cybersecurity practice and a leading member of the incident response practice. Colin has represented organizations of all sizes in preparing for and responding to cybersecurity incidents.

Colin has represented organizations in hundreds of incidents involving complex malware, ransomware, phishing/spear-phishing attacks, insider wrongdoing, and other threats to data privacy and security. His expertise includes regulations relating to threats and protection of personal information, regulations governing the use and disclosure of PHI including HIPAA, rules governing controlled unclassified information (CUI) and DFARS, international data protection regulations such as GDPR, financial privacy regulations including GLBA, BSA, and Sarbanes-Oxley, and other legal and technical frameworks governing highly sensitive information.

Colin has presented on concepts and strategy relating to technology, cybersecurity, and data privacy to law students, insurance brokers and carriers, trade organizations, publicly-traded and private companies, and government offices.

Colin graduated from DePaul University College of Law in Chicago with honors and an emphasis in information technology and data privacy. During law school, Colin was part of an initiative seeking to cross-train students in both law and technology and took coursework involving business continuity and disaster recovery, programming, and cybersecurity. 

Colin is practicing virtually in Illinois, where he is licensed.