Services
Privacy and Data SecurityOffice
Washington, D.C.Paul H. Luehr
Paul Luehr co-leads Manatt’s AI practice and has handled some of the largest data security and privacy incidents in history. With three decades of experience across law, government and consulting, he works with a variety of clients in retail, health care, financial services, technology, higher education and manufacturing, and Paul has earned a reputation as a “go to” advisor in high-stakes cybersecurity, privacy and AI matters.
The Cybersecurity Docket has named Paul a top incident response attorney for the past seven years, and previously as a consultant, he led forensic teams responding to some of the largest cyber breaches on record. As a federal prosecutor, he also pursued major cybercrimes for the U.S. Department of Justice and oversaw searches of the “20th hijacker’s” laptop after 9/11. Therefore, Paul has unique experience responding to ransomware attacks, state actor threats, phishing and other digital hacks.
In privacy, Paul advised the America Law Institute (ALI) on its Principles of the Law - Data Privacy, and he regularly counsels companies on the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), Europe’s General Data Protection Regulation (GDPR) and new U.S. state privacy laws. He also advises clients on Federal Trade Commission (FTC) matters, drawing on his experience as a former FTC manager who led the agency’s first internet team.
On AI matters, Paul is a member of the National Institute of Standards and Technology (NIST) AI Safety Institute Consortium formed under a White House Executive Order. Paul has performed cyber due diligence on several mergers and led AI panels for cybersecurity experts and national healthcare leaders. He also has created policies and assessments for firms seeking to launch or expand their AI programs.
Overall, Paul frequently represents clients before federal and state regulators and foreign data protection authorities. He has responded to hundreds of cyber attacks, guided large teams of experts, created robust compliance programs, supervised enterprise-wide privacy and cybersecurity assessments, led cyber-threat tabletop exercises and advised board directors on new data risks. He has given over 180 lectures at universities and trade organizations, and his insights have been featured on national television and radio and in publications such as The Wall Street Journal and The New York Times.
Related Practices
Services
Privacy and Data Security
Industries
Artificial Intelligence
