Jenny Holmes is the deputy leader of the firm’s Cybersecurity & Privacy team.
Jenny advises clients on the ever-changing legal landscape of data privacy and cybersecurity law, taking an active role in the development and management of the firm’s capability in this evolving area. Her practice involves developing and implementing system-wide privacy and security plans for numerous companies of various sizes, and creating response plans that address the mandates of the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the NY SHIELD Act, among others. Jenny is a Certified Information Privacy Professional/United States (CIPP/US), a preeminent credential in the field of privacy.
My practice focuses on the following areas:
The data privacy regime of various international, federal, and state laws is a complex patchwork of overlapping and sometimes conflicting laws. I routinely assist clients in analyzing which laws and regulations apply and design privacy programs that comply with the various applicable laws. In doing so, I draft external privacy policies, information security plans, and privacy response plans. Understanding that individual data is often a company’s biggest asset and biggest risk, I create programs that ensure safe storage and usage of personal information while also considering the practical needs of a company.
I also advise clients on the changing legal and regulatory data privacy landscape, including on the NY SHIELD Act, the CCPA, and the GDPR, and develop strategies for creating new privacy programs and leveraging existing regimes to comply with new and updated laws.
I advise clients in the aftermath of a privacy breach by explaining the regulatory framework of the various applicable data privacy laws while helping to craft a practical and cost-efficient response plan. I work together with third-party vendors to ensure complete breach remediation and review forensic reports to understand the root cause. I draft required notices, provide guidance on consumer or employee communications, and design and implement company policies to prevent future breaches.
In various corporate structure changes, I advise clients on pre- and post-transaction compliance issues relating to data privacy and cybersecurity. As part of due diligence reviews, I analyze deal documents, draft representations, disclosures, and warranties, and assess potential risk factors. I counsel clients on potential liabilities, required corrective actions, and prepare and implement those corrections.
The combination of the political climate and consumers’ increased expectations will create massive impacts on companies’ data management, requiring increased attention to satisfy legal obligations and protect data.
At Syracuse Law, Jenny was Business Editor of Syracuse Law Review, on the Moot Court Honor Society, and a member of the Justinian Honorary Law Society. She is a member of the Syracuse Law’s Chapter of the Order of the Coif and a recipient of the CALI (Constitutional Law) and the Cornelius W. Wickersham Jr. Awards.
U.S. District Court, Western District of New York
U.S. District Court, Northern District of New York
Syracuse University College of Law, J.D., Order of the Coif, magna cum laude
University of Virginia, B.A.
Jenny is a member of the Leaders Build Committee of the Habitat for Humanity and the co-chair of the Rochester Jewish Sports Hall of Fame. She also is a member of the Monroe County Bar Association, the New York State Bar Association, and the American Bar Association. Jenny serves as an office representative on the firm’s Associate Council.
Jenny Holmes, Nixon Peabody associate, is quoted in this article about the trend of rising costs for cybersecurity protection.
Chief Information Officer Mike Green and Rochester labor and employment associate Jenny Holmes are quoted in this article about data protection issues surrounding bring your own device policies.
Subscribe to stay informed of the latest legal news, alerts, and business trends.Subscribe