Caleb Skeath

About Caleb Skeath

I advise clients on a broad range of cybersecurity and privacy issues, including cybersecurity incident response, cybersecurity and privacy compliance obligations, internal investigations, regulatory inquiries, and defending against class-action litigation. My specialties include assisting clients in responding to a wide variety of cybersecurity incidents, ranging from advanced persistent threats to theft or misuse of personal information or attacks utilizing destructive malware. In addition to advising clients following cybersecurity incidents, I also assist clients with pre-incident cybersecurity compliance and preparation activities. I also maintain an active privacy practice, focusing on advising technology, education, financial, and other clients on compliance with generally applicable and sector-specific federal and state privacy laws.

Experience

1. Cybersecurity & Data Privacy Partner

   Covington & Burling LLP

   Oct 2022 — Present · Washington, DC, US

   I advise clients on a broad range of cybersecurity and privacy issues, including cybersecurity incident response and investigations; regulatory inquiries and investigations from the FTC, state Attorneys General, and other regulators; cybersecurity and privacy compliance obligations; and defending against litigation and business disputes arising from privacy and cybersecurity issues. I hold a Certified Information Systems Security Professional (CISSP) certification.I specialize in assisting clients in responding to a wide variety of cybersecurity incidents, ranging from advanced persistent threats to theft or misuse of personal information or attacks utilizing destructive malware. I have advised numerous clients on assessing post-incident notification obligations under applicable state and federal law, developing communications strategies for internal and external stakeholders, and assessing and protecting against potential litigation or regulatory risk following an incident. In addition, I have advised clients on responding to post-incident regulatory inquiries, including inquiries from the Federal Trade Commission and state Attorneys General.I also assist clients with pre-incident cybersecurity compliance and preparation activities. This can range from drafting and reviewing cybersecurity policies, overseeing cybersecurity risk or maturity assessments, drafting incident response plans and advising on training and tabletop exercises for such plans, and advising on compliance with cybersecurity guidance and best practices, including “reasonable” security practices.I also maintain an active privacy practice, focusing on advising clients on compliance with generally applicable and sector-specific federal and state privacy laws, including FERPA, FCRA, GLBA, TCPA, and COPPA.

Education

• University of Pennsylvania Carey Law School

  JD

  2011 — 2014

• American University

  BS, International Relations (Concentration in International Economics)

  2007 — 2010

• American University - Kogod School of Business

  BA, Business Administration (Concentration in Business Law)

  2007 — 2010