Andrew Chase

About Andrew Chase

As a seasoned cybersecurity and privacy attorney, I bring over a decade of experience in managing complex legal, risk, and compliance challenges at the intersection of technology and law. With deep expertise in data privacy, governance, risk management, and information security, I have helped organizations across diverse industries navigate evolving regulatory landscapes while protecting critical assets and enabling innovation.I hold advanced certifications such as CISM, CISSP, and CIPP/US, and have a unique blend of technical and legal expertise, having earned both a JD and a Master’s in Computer Information Systems. My career has been built on leading cross-functional teams to implement robust cybersecurity strategies, manage legal risk, and drive compliance programs that align with global regulations like GDPR, CCPA, and HIPAA.Throughout my career, I’ve provided counsel on data privacy and protection, negotiated complex technology agreements, and led incident response efforts. I’ve managed teams in high-pressure environments, fostering a culture of collaboration and continuous improvement, while ensuring alignment with strategic goals.Key strengths include:* Legal counsel on cybersecurity, privacy, and regulatory compliance* Data protection strategy and risk mitigation* Governance, Risk, and Compliance (GRC) program development*Incident response leadership and breach management* Cross-functional collaboration with business, legal, and IT teams

Experience

1. Partner

   Constangy

   Jan 2026 — Present

   My practice is dedicated to defending complex data-breach and privacy class actions, with a particular focus on cases arising out of large-scale cyber incidents, third-party compromises, and regulatory enforcement actions.

Education

• Seattle University School of Law

  Juris Doctor

  2010 — 2013

• Cornell University

  Certificate, Compliance Systems

• Park University

  BS, Computer Information Systems

  2002 — 2005

• Boston University

  MS, Computer Information Systems

  2007 — 2008

Skills

• Public Speaking
• Pci Dss
• Legal Research
• Criminal Law
• Payment Card Industry Data Security Standard (Pci Dss)
• Security Architecture Design
• Sdlc
• Information Technology
• Software Development
• Cissp
• Governance
• Vulnerability Management
• IT Service Management
• Information Assurance
• Vulnerability Assessment
• Soa
• Network Security
• Strategic Planning
• C&a
• Information Security Management
• Systems Engineering
• Project Management
• Technical Leadership
• Security
• Information Security
• Computer Security