Alan Leal

Alan Leal represents companies of every size across a broad range of data privacy and cybersecurity matters. His practice focuses on incident response related to actual or suspected cybersecurity incidents or data breaches, ranging from business email compromises to sophisticated ransomware attacks. Alan advises clients on their legal obligations under U.S. and international data privacy and breach notification laws and assists clients in devising crisis communication and notification strategies.

Before joining Wilson Elser, Alan served as a Deputy Attorney General at the New Jersey Attorney General’s Office in the Data Privacy and Cybersecurity Section. He conducted numerous investigations involving data privacy, cybersecurity, and social media accountability, primarily investigating violations of consumer protection laws, including the New Jersey Data Privacy Act, New Jersey Consumer Fraud Act, New Jersey Identity Theft Prevention Act, Health Insurance Portability and Accountability Act (HIPAA), and Children’s Online Privacy Protection Rule (COPPA). As a former state regulator, Alan understands how to navigate regulatory investigations and leverages this experience to deliver pragmatic, effective solutions to his clients.

During law school, Alan externed for the United States Attorney’s Office for the District of New Jersey on the Cyber Crimes Unit, where he assisted in the investigation of foreign criminal syndicates engaging in romance scams. He also interned for T-Mobile USA’s Privacy Office, where he helped draft privacy policies, compared and interpreted various then-nascent state privacy laws, and educated internal business teams on GDPR fine calculation.