Mauricio F. Paez

Partner

New York + 1.212.326.7889

Connect:

Share

Mauricio Paez advises Fortune 100 companies on legal issues related to digital transformations, technology sourcing and outsourcing, complex licensing arrangements, cybersecurity and privacy, and technology governance and compliance. With a focus on emerging technologies, Mauricio helps clients navigate legal issues related to global digital services, e-commerce, marketing, and technology development and adoption. A regular speaker and publisher, he is a recognized leader in these fields.

Mauricio focuses on legal issues related to emerging technologies, including generative and other AI (artificial intelligence) systems, enhanced computing, space-based services, blockchain and smart contracts, Web3, industrial internet, and robotics. He supports clients in a variety of industries and sectors, including technology, retail, financial services, communications, health care, utilities, transportation, satellite, and marketing. He helps these clients develop and implement worldwide B2B (business-to-business) and B2C (business-to-consumer) digital strategies, related global compliance programs, and commercial transactions.

Mauricio also assists these clients with cybersecurity and privacy incident response, including overseeing forensic investigators. He supports clients with implementing effective compliance programs and defends clients against governmental investigations and enforcement actions.

His experience also includes advising on IT (information technology) and business process outsourcing and other complex technology transactions. He excels in negotiating global arrangements, ranging from competitive requests for proposals, multiple vendor negotiations, setting up offshore captive operations, and long-term technology partnerships. He also helps clients address these issues in commercial agreements and corporate transactions, such as joint ventures, contractual ventures, mergers and acquisitions, and investments.

Mauricio is a member of the American Bar Association and the International Association of Privacy Professionals (IAPP).

Experience

  • Aerospace manufacturer develops centralized technology governance framework and integrated enterprise risk management program for its IT, OT, and IoT assetsJones Day advised a global aerospace manufacturer on the design and implementation of a centralized technology governance framework and integrated enterprise risk management program for its IT, OT, and IoT assets.
  • AHA obtains vacatur of HHS guidance document overreading HIPAA's application to online technologiesOn behalf of the American Hospital Association and other hospital associations and hospitals, Jones Day persuaded a district court to invalidate a new rule created in an HHS guidance document, which addressed the application of HIPAA to covered entities' public-facing webpages using online technologies that collect the IP addresses of devices visiting the pages.
  • Public company board seeks advice on cybersecurity and board oversight responsibilityJones Day advised a board of a public company on oversight of data security and privacy obligations, trends, compliance challenges, vendor management and best practices.
  • Confidential client responds to third-party data security breach incidentJones Day assisted a confidential energy utility client with responding to a third-party data security breach incident and advised the client on appropriate individual and state attorney general notifications.
  • AMS-IX advised in creating corporate and operational structure to launch U.S. AMX-IX Internet exchangeJones Day advised AMS-IX BV in creating a corporate and operational structure to launch AMS-IX Internet exchange in the U.S.
  • Signature Aviation sells Global Engine Services business to StandardAero for $230 millionJones Day advised Signature Aviation plc, a market-leading provider of global aviation support services, in the $230 million sale of the Engine Repair and Overhaul (ERO) business to StandardAero, a portfolio company owned by The Carlyle Group and a leading provider of maintenance, repair, and overhaul services.
  • Entravision Communications acquires Pulpo MediaJones Day advised Entravision Communications Corporation, a diversified Spanish-language media company, in connection with its acquisition of Pulpo Media, Inc., a leading provider of digital advertising services and solutions focused on Hispanics in the U.S. and Latin America.
  • Online retailer seeks advice on unauthorized access compromising consumer dataJones Day represented an online retailer regarding unauthorized access to consumer data, including coordination of forensic investigation, notice to credit card companies and insurers, and nationwide breach notification.
  • Corporate service provider seeks advice on potential compromise of payroll and benefits dataJones Day represented a corporate service provider in the investigation of a data security compromise involving coordination with Secret Service, a computer forensics firm, and other interested parties to determine the extent of the breach and the appropriate response.
  • SAP acquires enterprise multichannel e-commerce company hybrisJones Day advised SAP AG in connection with its acquisition of hybris AG.
  • Energy company renegotiates and extends full-scope IT outsourcing agreementJones Day represented a large, multi-state utility company in the renegotiation and extension of a full-scope IT outsourcing services agreement.  The new agreement has a seven-year term and is valued in excess of $450 million.
  • ABB acquires wireless technology company Tropos NetworksJones Day advised ABB in its acquisition of Tropos Networks Inc., a Silicon Valley-based company that develops and markets wireless technologies and products for distribution area communication networks.
  • Riverside acquires DentalPlans.comJones Day advised The Riverside Company in connection with its acquisition and related financing of DentalPlans.com Inc., a direct-to-consumer marketing and e-commerce platform for dental savings plans.
  • PageOnce raises capital in Series C placementJones Day advised PageOnce, Inc., a developer of a personal financial management application for smartphones and PCs, in a $15 million private placement. Morgenthaler Ventures was lead investor and existing PageOnce investors, including Pitango Ventures and Chairman of the Board Liron Petrushka, participated.
  • VMware acquires SlideRocketJones Day advised VMware, Inc. in its acquisition of SlideRocket, Inc., a SaaS-based business presentation provider.
  • Sprint Nextel acquires next generation wireless infrastructure equipment to upgrade nationwide wireless networkJones Day represented Sprint Nextel Corporation in its acquisition of next generation wireless infrastructure equipment to be used to upgrade Sprint's nationwide wireless network.
  • Bank of Montreal provides $800 million reducing revolving credit facility to Nuvei TechnologiesJones Day represented the Bank of Montreal, as administrative agent and a lender, in connection with a $800 million reducing revolving credit facility provided to Nuvei Technologies, Inc., Pivotal Refi LP, and Nuvei Technologies Corp.
  • Verizon Media forms partnership with BuzzFeed to acquire HuffPostJones Day advised Verizon Media in its sale of HuffPost to BuzzFeed.
  • Japanese online gaming developer and publisher reviews data privacy and security issues related to its online multiplayer gaming platformJones Day is advising a Japanese online gaming developer and publisher on data privacy and security issues related to its online multiplayer gaming platform that uses digital currency and subscription services for online gaming.
  • Marathon Oil secures its customer dataJones Day conducted a data privacy and security assessment for Marathon Oil Corporation and assisted with the development and implementation of a global data privacy and security compliance program.
  • Nokia signs multi-year outsourcing services agreement with leading India IT service providerJones Day represented Nokia Corporation in a multi-year outsourcing services agreement with one of India's largest information technology service providers.
  • Nokia signs long term service agreement with U.S. data security providerJones Day represented Nokia Corporation in a long term service agreement with a leading United States data security provider.
    • View All

    March 2025 Handout

    Overhauling the European Digital Landscape

    FEBRUARY 2025 Commentary

    EU AI Act: First Rules Take Effect on Prohibited AI Systems and AI Literacy

    February 2025 Alert

    New Export Control Rule Regulates Global Diffusion of Artificial Intelligence

    JANUARY 2025 Alert

    Understanding DORA: Digital Operational Resilience Act Now in Effect for Financial Entities and ICT Service Providers

    November 2024 Alert

    TSA Releases Proposed Rule to Enhance Pipeline and Railroad Cyber Risk Management

    NOVEMBER 2024 Alert

    NIS 2 Directive: Transposition Period is Up for EU Member States

    NOVEMBER 2024 Alert

    New York Imposes Stringent Cybersecurity and Cyber Incident Reporting Obligations on Hospitals

    October 2024 Commentary

    First Tranche of Australia's Much Anticipated Privacy Law Reforms Revealed

    October 2024 Alert

    Illinois Becomes Second State to Pass Broad Legislation on the Use of AI in Employment Decisions

    OCTOBER 2024 Commentary

    EU Enacts Broad Cybersecurity Requirements for Hardware and Software Products
    View All

    Additional Speaking Engagements

    • July 30, 2020
      Jones Day's Roundtable Webinar: Trade Secrets 2020 - Combating New Threats
    • April 25-26, 2018
      Third Annual Latin America Privacy & Cybersecurity Symposium
    • Mayo 17-18, 2017
      Segundo Simposio Latinoamericano de Ciberseguridad y Privacidad
    • May 17-18, 2017
      Second Latin American Cybersecurity and Privacy Symposium
    • May 10-11, 2017
      Internet of Things (IoT) National Institute: Everything Will be Connected, ABA National Symposium
    • April 25, 2017
      GDPR Workshop: Best Practices for Implementing the EU General Data Protection Regulation, Jones Day Seminar
    • July 21, 2016
      The Changing Landscape of Cybersecurity: Data Breaches, Cross-border Data Transfers and Risk Management
    • April 1, 2016
      2016 Latin America Cybersecurity Symposium
    • March 30-31, 2016
      Internet of Things (IoT) National Institute, Presented by: ABA Section of Science & Technology Law
    • February 23, 2016
      Emerging Issues in Data Risk and Compliance in the Financial Services Industry
    • January 29, 2016
      2016 Latin American CyberSecurity Symposium
    • December 15-16, 2015
      PRO-ACTIVITY: The Evolution of Cybersecurity Preparedness, ALM cyberSecure 2015
    • December 3, 2015
      Business Forum 1: TransAtlantic Cybersecurity Considerations
    • November 10, 2015
      The Hispanic Bar Association of New Jersey Presents the 6th Annual Corporate Counsel Roundtable
    • November 4, 2015
      2015 Cybersecurity Institute in Government Contracts
    • October 7, 2015
      EU–U.S. Safe Harbor Program: What Does the Invalidation Mean to Your Business?
    • September 15, 2015
      Executive Roundtable Series - Opportunities and Risks in the International Marketplace: Developments and Trends in International Trade, Export Controls, and Global Cybersecurity
    • September 2-5, 2015
      2015 HNBA Annual Convention
    • June 16, 2015
      Mid-Year Cybersecurity and Data Protection Legal Summit
    • December 2, 2014
      CLE Academy Privacy and Cybersecurity
    • November 20, 2014
      HBA of NJ, 5th Annual Corporate Counsel Roundtable - Cybersecurity Response: Best Practices From the Field
    • November 6, 2014
      Futures Industry Association 2014 Convention: Cybersecurity Threats & Responses
    • October 28, 2014
      CyberSecurity: Preparing for and Responding to CyberIncidents
    • October 16, 2014
      Jones Day Partners Take Part in the Inaugural Illinois Leadership Conference
    • October 1, 2014
      PLI's Corporate Counsel Institute 2014
    • September 18, 2014
      Cyber Due Diligence - A Pre-purchase Check-up Reveals Data Risk Hot Spots, International Association of Privacy Professionals, Privacy Academy
    • September 11, 2014
      Hispanic National Bar Association: Cybersecurity- Legislation, President’s Executive Order, and Regulatory Action
    • July 17, 2014
      JD CLE FDIC and NYS Cyber Security Trends
    • July 17, 2014
      Federal and State Regulators Crackdown on Banks Over Cybersecurity, West Legal Edcenter
    • June 12, 2014
      Trends in Privacy and Security Risks: What You Need to Know Now, JD MCLE Academy
    • June 12, 2014
      Social Media and Data Privacy: What You Need to Know
    • March 23, 2014
      The Tangled Vine: Federal vs. State Law, Unclaimed Property Professionals Organization Annual Meeting 2014
    • March 20, 2014
      Hispanic National Bar Association Corporate Counsel Conference: Cybersecurity - How to Mitigate Risks and Respond to Security Breaches and Theft
    • February 13, 2014
      Privacy and Security Concerns: The Bring Your Own Device Policy, The Knowledge Group
    • October 3, 2013
      Bring Your Own Device (BYOD): Are You Breaching Your Own Data?, Northwestern Law CLE - 52nd Annual Corporate Counsel Institute
    • June 9, 2013
      Managing Crisis: The intersection of Internal Investigations, Corporate Governance, and Data Privacy
    • January 2013
      Privacy Year in Review, Jones Day University
    • March 20, 2012
      Trademarks and the Internet- Cybersquatting, Brandjacking, and Generictop-level Domains (gtlds) – New Dangers in Cyber Space, Hispanic National Bar Association Corporate Counsel Conference
    • February 7, 2012
      Managing a Data Breach. JD CLE University
    • December 2011
      Jones Day New York hosts PALS skills workshop for junior attorneys of color
    • November 30, 2011
      The Knowledge Congress: Cyber Security Best Practices for Banking and Financial Sectors in 2011 Live Webcast
    • October 20, 2011
      Jones Day Dallas CLE University
    • August 11, 2011
      2011 Speaker Series
      The WikiLeaks Phenomenon: Protecting the Confidential Information of Your Company and Its Clients
    • August 7, 2011
      American Bar Association Annual Meeting- Labor and Employment Law Section: Investigating and Forgetting on the Web
    • July 20, 2011
      Cloud Computing: Global Data Privacy and Secuity Compliance
    • September 23, 2010
      Emerging Technologies & Workplace Privacy: The Evolving Understanding of Privacy Expectations in the Workplace
    • May 1, 2009
      Computer Fraud and Abuse and Intellectual Property Issues, American Bar Association, Section of Labor and Employment Law, Mid-Year Meeting
    • May 1, 2009
      Security, Data Protection and Privacy: U.S. and International Legal Principles, Cardozo School of Law - CLE
    • February 24, 2009
      Protecting Privacy and Confidentiality Through Security Measure: Developing and Executing a Legal Outsourcing strategy to Ensure Success, LPO Summit: American Conference Institute
    • July 2, 2008
      Data, Security, and Privacy Issues Facing the U.S. Financial Services Industry, ALI-ABA Live Telephone Seminar - Audio Webcast
    • May 16, 2008
      Security Breaches and Workplace Privacy, Association of Corporate Counsel
    • September 11, 2004
      The Trend Towards Off-Shore Outsourcing:  Law and Policy,  Hispanic National Bar Association Convention, 2004
    • April 28, 2003
      Current Intellectual Property Issues and the Internet, Hispanic National Bar Association Mid-Year Convention, 2002
    • October 23, 2002
      Security and Technology Post 911, Northeast Ohio Software Association (NEOSA)
    • March 7, 2002
      Third Annual E-Commerce & Internet Symposium
    • October 12, 2001
      Accessing Information Technology:  Trends in Outsourcing,  Business Law Symposium, New Jersey State Bar Association
    • September 8, 1999
      Digital Distribution on the Internet, First Conference, Inc.

    Before sending, please note:

    Information on www.jonesday.com is for general use and is not legal advice. The mailing of this email is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Anything that you send to anyone at our Firm will not be confidential or privileged unless we have agreed to represent you. If you send this email, you confirm that you have read and understand this notice.