Most organizations invest heavily in building a data protection program but never test it. Technical controls like firewalls and intrusion detection are routinely subjected to penetration testing, yet the operational and procedural elements — incident investigation and response, access management, data minimization, and backup and recovery — often go unevaluated until a real incident exposes the gaps. We work with clients to develop and run tabletop simulations that test how their organization actually responds to a data security incident. Each scenario is tailored to the client's specific circumstances and is designed to engage senior leadership directly with the organization's risks and decision points: how incidents arise (from malicious insiders to vendor missteps), how seemingly unrelated business decisions can escalate into costly exposure, how employee relationships factor into data protection, and how a single incident can strain critical supplier, customer, and stakeholder relationships. Conducted under privilege, these exercises give leadership a safe environment to pressure-test their response plan and identify weaknesses before they are tested by an actual breach.

We offer training across the full range of privacy and cybersecurity obligations, customized to your team's role and maturity. Topics include:

• General privacy laws and your core compliance obligations
• Responding to data subject rights requests
• AdTech, cookies, and online tracking
• Privacy compliance and governance programs
• DOJ Bulk Data Rule requirements
• CCPA cybersecurity assessment requirements

These sessions can be delivered to general staff, specialized teams, or in-house legal, and scaled to the depth each audience needs.

This training equips business professionals with the practical IP knowledge they need to protect company assets and avoid costly missteps — without the legal jargon. Topics include how trademarks, copyrights, patents, and trade secrets are created, owned, and enforced; what employees must understand about work-made-for-hire; how to identify and safeguard confidential information; and the risks of misusing third-party IP in marketing, product development, and content creation. Participants leave with clear, actionable frameworks for spotting IP issues early and knowing when to loop in counsel — before a problem becomes a liability.

This training addresses the rapidly evolving legal landscape around generative AI and AI-assisted tools, tailored separately for business users and legal professionals. For business teams, the focus is practical: what you can and cannot do with AI tools at work, how AI use intersects with confidentiality obligations, IP ownership of AI-generated content, and your company's acceptable-use policies. For in-house legal teams, the training goes deeper — covering emerging federal and state AI regulations, vendor AI contract provisions to scrutinize, liability exposure from AI-generated outputs, and how to build a defensible AI governance framework. Both tracks emphasize real-world scenarios drawn from current enforcement trends and litigation, so participants gain judgment, not just knowledge.

This training is designed for marketers and other business professionals who create, review, or approve advertising content — sharpening legal instincts, identifying red flags early, and knowing when to loop in counsel before a campaign creates liability. Topics include the regulatory landscape; claim substantiation standards and the puffery line; rules governing customer testimonials, star ratings, and consumer reviews; comparative and competitive advertising; influencer marketing and FTC endorsement disclosure requirements; subscription and auto-renewal compliance; and pricing and promotional claims. The training also addresses special claim categories that carry heightened risk — including "Made in the USA," "up to," and environmental claims — and explains how surrounding copy, visuals, and context can transform an otherwise defensible statement into one requiring substantiation. Participants leave with a practical framework for evaluating their own marketing materials and a clear set of red flags that require legal review.

This training gives legal and business professionals a comprehensive framework for designing and operating subscription and auto-renewal programs that comply with federal law, a rapidly expanding body of state automatic renewal statutes, and increasing regulatory scrutiny. Topics include ROSCA and the FTC's negative option framework; clear and conspicuous disclosure requirements; affirmative consent and legally sufficient authorization; cancellation mechanisms; and post-enrollment obligations such as reminder notices and confirmation requirements. The training examines recent FTC enforcement actions and state attorney general investigations to illustrate how regulators interpret the law's requirements and what the consequences of non-compliance look like. Participants leave with a practical compliance checklist and a clear framework for auditing existing subscription programs against current legal requirements.

This advanced training is designed for legal counsel and marketing professionals who need the technical depth to evaluate claims, assess litigation risk, and make defensible substantiation decisions. Topics include the foundational substantiation framework — what it means to have a reasonable basis for a claim and why substantiation must exist before a claim runs — followed by a systematic examination of comparative claim types and their distinct legal standards: superiority and preference claims, dangling comparisons, parity claims, exclusivity claims, establishment claims, and others. The training also addresses puffery in depth, including how context can transform a defensible expression of opinion into an actionable product claim, and provides practical checklists for testing protocols and consumer surveys. Participants leave with a claims management framework and the analytical tools to evaluate their own advertising before a regulator or competitor does it for them.

This training equips legal and business professionals with the knowledge to evaluate, structure, and substantiate environmental marketing claims — and to identify the practices that regulators and plaintiffs' attorneys are actively targeting. Topics include the full scope of what constitutes green advertising, the applicable regulatory landscape — including the FTC's Green Guides, state attorneys general, the NAD, and international frameworks in the EU and UK — and the major categories of high-risk claims like general "sustainable" and "eco-friendly," carbon emissions claims, internal and third-party certifications, and recycling, recycled content, and PFAS-related claims. For each category, participants learn what triggers scrutiny, what substantiation is required, and how to narrow and qualify claims to reduce exposure, drawing on recent enforcement actions, NAD guidance and class actions.

This training provides legal and marketing professionals with a thorough grounding in the FTC's endorsement and testimonial rules and their practical application across influencer programs, brand ambassador relationships, and consumer review platforms. Topics include what constitutes a material connection requiring disclosure; what clear and conspicuous disclosure requires across different platforms and formats; and the substantiation obligations that attach when an endorser makes a product claim. The training also covers the operational mechanics of a compliant influencer program — vetting and contracting with influencers, implementing guidelines, and monitoring published content — as well as the rules governing soliciting, collecting, filtering, and featuring consumer reviews in advertising, including topics like the treatment of incentivized reviews, fake review prohibitions, and the risks of suppressing negative reviews. Throughout, the training draws on recent FTC enforcement actions and class action litigation to illustrate where brands and influencers have run into trouble. Participants leave with a practical compliance framework for both influencer programs and review practices.

This training gives legal and business professionals a working command of U.S. promotions law — from initial program design through post-promotion administration. Topics include how to distinguish sweepstakes, contests, and giveaways; why the prize-chance-consideration triad determines legality and how to structure around it; and the role of official rules as enforceable consumer contracts. The training covers federal and state-specific requirements — including registration, bonding, and disclosure obligations — as well as advertising disclosures, social media platform compliance, FTC endorsement considerations, and special issues involving prizes like trips, vehicles, and event tickets. Post-promotion obligations — winner affidavits and publicity releases, IRS reporting, and prize fulfillment — are addressed in practical, step-by-step terms. The training can also cover consumer loyalty and retention programs. Participants leave with a clear framework for building compliant promotions and the ability to spot common red flags that signal legal exposure before a promotion goes live.