Privacy & Regulatory Compliance
Review of applicable Michigan, other state, and federal privacy, data protection, and information-security obligations; privacy policies and business practices.

Home / Data Privacy & Cybersecurity
Data Privacy & Cybersecurity Law
Privacy compliance, data breach response, identity theft and information-risk guidance for Michigan businesses, professionals and individuals.
What we are, and what we are not
Estate & Risk does not write code, manage networks or sell security software. We are a law firm. Joseph is an attorney who also holds the CIPP/US and CIPM privacy certifications, so the advice you receive is legal advice from someone trained in how privacy programs work.
In practice, the firm serves as the bridge between the people who have to make the decisions (owners, executives, boards and insurers) and the technical people who work on the systems. We translate what the law requires into plain steps, and we translate what the technical team finds into what it means legally.
Privacy law is growing quickly at both the state and federal level. The firm follows Michigan and federal requirements, and helps Michigan businesses understand when another state's privacy law may reach them.
Why start with a lawyer
When a business brings in a law firm to give legal advice about a privacy problem or a security incident, communications with the attorney may be protected by attorney-client privilege, and materials prepared because of expected litigation may be protected as attorney work product.
Those protections come from working with an attorney. They depend on the facts and on how the work is set up, which is one reason to involve counsel early.
Talk with the firmBusiness counsel & digital risk
Privacy compliance, cybersecurity incidents, contracts, and information-risk legal counsel.
Review of applicable Michigan, other state, and federal privacy, data protection, and information-security obligations; privacy policies and business practices.
Legal guidance on incident-response coordination, preservation, notification duties, contractual obligations, and working with technical and insurance professionals.
Assess legal options, reporting, documentation, and privacy risks following unauthorized exposure or misuse of personal or business information.
Review policy terms, notice requirements, vendor agreements, data-processing obligations, indemnity, risk allocation, and incident-related contractual provisions.
Attorney & privacy credentials
Joseph holds the Certified Information Privacy Professional/United States (CIPP/US) and Certified Information Privacy Manager (CIPM) credentials through the International Association of Privacy Professionals (IAPP).
Before practicing law, he spent more than 25 years in law enforcement, investigations, leadership and public service. That experience shapes a practical, disciplined approach to identifying risk, evaluating evidence and helping clients make informed decisions.
Fees
$350 / hourstandard attorney rate
A flat fee may be available when the scope can be reasonably defined in advance. Scope and fee are discussed before the engagement begins.
Business & contract services
Ready to talk?
The goal is not just to complete a document or respond to today's issue. It is to understand what the decision changes tomorrow, for your family, career, business or legacy.
3310 W. Big Beaver Rd., Suite 265, Troy, MI 48084 · Serving Troy, Oakland County and clients across Michigan