Isaac G.Lara

Associate

New York + 1.212.326.3744

Isaac Lara's practice focuses on all aspects of privacy and cybersecurity matters, including incident response, privacy compliance, technology governance, and risk management.

Isaac represents clients on all stages of data breach response and ransomware attacks, from initial containment and forensic investigations to domestic and international regulatory notifications. In particular, he advises on incident management and preparedness, data restoration and system recovery, third-party risk assessments, crisis communications, threat-actor negotiations, FBI consultations, and criminal referrals. Isaac also supports clients with the development and management of comprehensive information security programs — including drafting policies on identity and access management, asset management, and acceptable use — that are consistent with industry cybersecurity standards like NIST (National Institute of Standards and Technology) and ISO/IEC (International Organization for Standardization and International Electrotechnical Commission) 27001 and 27002.

Isaac also advises clients on compliance with state, federal, and global privacy laws, such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Utah Consumer Privacy Act (UCPA), Gramm-Leach-Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA), and the Federal Trade Commission (FTC) Act, among others.

Isaac maintains an active pro bono practice. Most recently, he successfully represented a large church before the New York Supreme Court, where he argued and obtained dismissal of a high-profile administrative proceeding that attracted significant press attention.

Fluent in Spanish, Isaac currently serves as deputy regional president of the New York chapter of the Hispanic Bar National Association.

Experience

  • Aerospace manufacturer develops centralized technology governance framework and integrated enterprise risk management program for its IT, OT, and IoT assetsJones Day advised a global aerospace manufacturer on the design and implementation of a centralized technology governance framework and integrated enterprise risk management program for its IT, OT, and IoT assets.
  • Additional Speaking Engagements

    • May 29-30, 2024
      Seventh Annual Latin American Privacy and Cybersecurity Symposium