Jeff Kosseff is Counsel in the firm’s Privacy and Cybersecurity practice group. Mr. Kosseff brings experience counseling clients – ranging from start-ups to some of the world’s largest companies – on emerging privacy and cybersecurity legal issues. He is the author of the treatise and textbook Cybersecurity Law, published by Wiley in February 2017.

Mr. Kosseff’s practice focuses on helping companies develop products and services that comply with privacy and cybersecurity laws. He drafts privacy policies, counsels clients on federal and state privacy laws, and helps companies implement Privacy by Design programs. He develops cybersecurity policies and programs, and oversees tabletop exercises to identify and remediate clients’ potential cybersecurity vulnerabilities. He also helps companies respond to data breaches and other cybersecurity incidents.

In addition to his privacy and cybersecurity practice, Mr. Kosseff has advised media companies on Section 230 of the Communications Decency Act, copyright, defamation, and other content-related legal issues, and has regularly conducted prepublication review for online, television, and print media clients. Before becoming a lawyer, he was a journalist for The Oregonian newspaper and was a finalist for the Pulitzer Prize for national reporting and recipient of the George Polk Award for national reporting.


  • Counseled companies on federal, state, and international privacy laws and PCI-DSS
  • Advised companies on responses to data breaches
  • Led the development and implementation of information security policies and Privacy by Design programs
  • Drafted external privacy notices and internal privacy policies
  • Drafted and negotiated contractual provisions regarding privacy and cybersecurity
  • Advised clients on legislative, regulatory, and advocacy strategies for technology policy issues
  • Drafted comments to the Federal Communications Commission and the Federal Trade Commission
  • Advised clients on advertising law, FTC disclosure rules, DAA/NAI Codes, and endorsement guidelines
  • Litigated cybersecurity, privacy, and electronic surveillance issues in federal and state courts
  • Performed prepublication review and advised journalists on legal questions regarding copyright, defamation, and other publication risks
  • Advised online intermediaries on immunity under Section 230 of the Communications Decency Act


  • Covington & Burling, LLP, Associate


  • Certified Information Privacy Professional (CIPP/US)
  • Privacy by Design Ambassador (Information and Privacy Commissioner of Ontario)


  • International Association of Privacy Professionals, Research Advisory Board (2017-present)
  • International Association of Privacy Professionals, Publications Advisory Board (2014-2016)
  • Board of Directors, The Writer’s Center


  • International Association of Privacy Professionals


  • Cybersecurity Law (Wiley)
  • The Gradual Erosion of the Law that Shaped the Internet: Section 230’s Evolution Over Two Decades, Columbia Science and Technology Law Review (forthcoming 2017)
  • “Cyber-Physical Systems and National Security Concerns,” chapter in forthcoming book, Security and Privacy in Cyber-Physical Systems: Foundations and Applications (Wiley)
  • Presenter, Ten Reasons to Adopt the NIST Cybersecurity Framework, The Law & Policy of Cybersecurity Symposium, University of Maryland (2016)
  • Presenter, Preserving the Privilege During Breach Response, RSA Conference (2016)
  • The Hazards of Cyber-Vigilantism, Computer Law & Security Review (March 2016)
  • Positive Cybersecurity Law: Creating a Consistent and Incentive-Based System (symposium article), Chapman Law Review (2016)
  • The Cybersecurity Privilege, I/S: A Journal of Law and Policy for the Information Society (2016)
  • A New Legal Framework for Online Anonymity, IEEE Security & Privacy (Nov./Dec. 2015)
  • Presenter, Digital Rules of Engagement, UMSL Digital Media Marketing Conference (2015)
  • Law for Media Startups, guidebook published by Tow-Knight Center for Entrepreneurial Journalism at the City University of New York, March 2015 (Co-Author)
  • Defending Section 230: The Value of Intermediary Immunity, 15 J. of Tech. Law and Policy 123 (University of Florida) (2010)


  • Georgetown University Law Center, J.D., 2010,
    magna cum laude
    Order of the Coif
    Georgetown Law Journal, Executive Articles Editor
  • University of Michigan, M.P.P, Economic Policy, 2001
  • University of Michigan, B.A., Economics, 2000


  • United States Court of Appeals for the Ninth Circuit, Hon. Milan D. Smith, Jr. (2011-2012)
  • United States District Court for the Eastern District of Virginia, Hon. Leonie M. Brinkema (2010-2011)


  • District of Columbia
  • United States Court of Appeals for the Ninth Circuit
  • United States District Court for the Eastern District of Virginia