Our Website Uses Cookies

We and the third parties that provide content, functionality, or business services on our website may use cookies to collect information about your browsing activities in order to provide you with more relevant content and promotional materials, on and off the website, and help us understand your interests and improve the website.

For more information, please contact us or consult our Privacy Notice.

Your binder contains too many pages, the maximum is 40.

We are unable to add this page to your binder, please try again later.

This page has been added to your binder.

PDF Binder
- Create PDF
- Add to Binder
Word Document Binder

Kurt Wimmer

Partner

Washington +1 202 662 5278 kwimmer@cov.com Download V-card

View Less

Kurt Wimmer is the U.S. chair of our Data Privacy and Cybersecurity Practice Group, and is past chair of the Privacy and Information Security Committee of the American Bar Association’s Antitrust Section. He is rated in the first tier by Legal 500, designated as a national leader in Chambers USA, and is included in Best Lawyers in America in four areas. Sources for Chambers USA describe him as "a leading person in the field" and "extremely gifted at what he does."

Mr. Wimmer represents major social media companies, global technology companies, and multinationals on privacy, cybersecurity, and technology law issues. As a former Fortune 500 general counsel, he “offers clients experience and insight having been both in-house and outside counsel,” according to Chambers USA. His clients include Facebook, Microsoft, Samsung, Accenture, General Mills, ExxonMobil, Instagram, WhatsApp, Evernote, Cloudflare, CBS, the National Football League, and the National Hockey League.

Mr. Wimmer is qualified as a Certified Information Privacy Professional for Europe (CIPP/E) and the United States (CIPP/US) by the International Association of Privacy Professionals. He focused on EU data protection law in Covington’s London office, where he was managing partner, from 2000 to 2003. From 2006 to 2009, he was general counsel of Gannett Co., Inc. Mr. Wimmer has testified before Congress and state legislatures several times, as well as legislative bodies in several other countries. He has represented industry coalitions and published widely on the GDPR and global Internet jurisdiction issues.

View More View Less

Provides ongoing global privacy advice to a major social media company.
Represented one of the largest consumer electronics companies in the world in a global privacy assessment, and assisted in crafting new privacy policies in more than 70 languages, a privacy-by-design program, and a privacy governance system.
Representation of a Fortune 500 media company in obtaining a complete victory in a non-public FTC investigation.
Negotiation of favorable consent orders for multiple clients before the FTC.

Immediate Past Chair, Privacy and Information Security Committee of the American Bar Association Section on Antitrust Law
Bureau of National Affairs (BNA) Internet Legal Resource Center Board of Advisors
Global Internet Policy Project, Advisory Board Member

COVID-19: Legal and Business Toolkit

As the legal, regulatory, and commercial implications of coronavirus COVID-19 continue to evolve, our lawyers and advisors are helping clients navigate the complex considerations that companies around the world are facing and develop plans and strategies in response. Reach out to our COVID-19 task force at COVID19@cov.com. Below is a compendium of resources ...

Covington Represents Piramal in $950M Sale of Healthcare Data and Analytics Company

WASHINGTON—Covington represented Piramal Enterprises Limited in itsdefinitive agreement to sell Decision Resources Group to Clarivate Analytics plc, in a deal valued at $950 million. The $950 million purchase price includes $900 million in cash and approximately $50 million in Clarivate ordinary shares to be issued following the one-year anniversary of ...

India Proposes Updated Personal Data Protection Bill

More than a year after the Government of India’s Committee of Experts released a draft Personal Data Protection Bill in July 2018 (the “2018 draft”), India is one step closer to passing a comprehensive data privacy law. On December 11, 2019, India’s Minister for Electronics and Information Technology introduced an updated draft of Personal Data...… Continue ...

China Enacts Encryption Law

On October 26, 2019, China enacted a landmark Encryption Law, which will take effect on January 1, 2020. The Encryption Law significantly reshapes the regulatory landscape for commercial encryption, including foreign-made commercial encryption products, but leaves many questions to be answered in future implementing regulations.

California Attorney General Releases Draft CCPA Regulations

On October 10, 2019, California state attorney general Xavier Becerra announced the release of proposed implementing regulations concerning the California Consumer Privacy Act (CCPA). Interested stakeholders can submit written comments until December 6, 2019 at 5 PM (Pacific Time). In addition, four public hearings will be held on December 2nd (Sacramento), ...

New Ballot Initiative Seeks to Redo the CCPA

A new ballot initiative would create the California Privacy Rights and Enforcement Act (“CPREA”) and would make several changes to the California Consumer Privacy Act (“CCPA”). CPREA makes the following changes and additions: California Privacy Protection Agency: This ballot initiative would establish the California Privacy Protection Agency (“CPPA”), which ...

Federal Trade Commission Hosts Workshop to Review the Children’s Online Privacy Protection Rule

On Monday, the Federal Trade Commission held a workshop to examine whether to update the FTC’s rule adopted under the Children’s Online Privacy Protection Act (“COPPA Rule”). The Future of the COPPA Rule: An FTC Workshop featured a range of speakers and panelists, including representatives from industry, consumer groups, and academia.

Covington Serving as U.S. Counsel to Philippines Investigative Journalist

WASHINGTON—Covington announced that the firm will be serving as part of an international team of lawyers representing media pioneer Maria Ressa, CEO, Cofounder and Executive Editor of Rappler, one of the leading online news platforms in the Philippines, as well as representing Rappler itself. Covington will be serving as U.S. counsel and will coordinate as ...

China Releases Updated Draft Encryption Law for Public Comment

On July 5, 2019, China’s Standing Committee of the National People's Congress (NPC) published a new draft Encryption Law (“the draft Law”) for public comment. The draft Law, if enacted as drafted, would bring significant new changes to China’s commercial encryption regime.

China Releases Draft Amendments to the Personal Information Protection Standard

On February 1, 2019, China’s National Information Security Standardization Technical Committee (“TC260”) released a set of amendments to GB/T 35273-2017 Information Technology – Personal Information Security Specification (“the Standard”) for public comment. The comment period ends on March 3.

China Privacy Developments in 2018

The past year was a particularly significant one for the development of Chinese privacy law. During 2018, the Chinese government systematically established the country’s regulatory requirements for cybersecurity and data privacy and continued to implement the Cybersecurity Law, which took effect on June 1, 2017.

Covington Assists Veritas Capital with $5.7 Billion Acquisition of athenahealth

WASHINGTON—Covington is advising private equity firm Veritas Capital on healthcare and other regulatory aspects of its recently announced deal to acquire athenahealth for approximately $5.7 billion. athenahealth is a leading provider of network-enabled services for hospital and ambulatory customers nationwide. Rujul Desai and Ian Brekke are leading the Covington ...

India’s Committee of Experts Releases Draft Personal Data Protection Bill

On July 27, 2018, the Government of India’s Committee of Experts released a draft Protection of Personal Data Bill. Together with an accompanying report, the draft bill moves India one step closer towards enacting a comprehensive data protection regime. Last year, the Supreme Court of India issued a landmark decision holding that privacy is a...… Continue Reading

India’s Committee of Experts Releases Draft Personal Data Protection Bill

California Passes Expansive Consumer Privacy Law

On June 28, 2018, the Governor of California signed the California Consumer Privacy Act of 2018 (“CCPA”). The new law is the most comprehensive data privacy statute in the United States and introduces significant privacy requirements for covered businesses. The CCPA takes effect on January 1, 2020, but based on comments from both the public-interest and business ...

Covington’s Henriette Tielemans Receives Prestigious Data Privacy Award

BRUSSELS—Henriette Tielemans, co-chair of Covington’s global Data Privacy and Cybersecurity practice, has today received the IAPP Privacy Vanguard Award, the industry's top honor, for her lifelong services to the data privacy community. The International Association of Privacy Professionals (IAPP) is the world’s largest and most comprehensive global information ...

IAB/4A’s Release Draft Standard Addendum for Digital Video Advertising in TV Long Form Video for Public Comment

Digital advertising typically involves a vast network of publishers, advertisers and their agencies, advertising exchanges and networks, technology platforms, and measurement and data analytics providers. To help streamline the commercial dealings of all of these parties in this complex ecosystem, advertising industry self-regulatory groups have developed ...

Covington Represents Bacardi in Acquisition of Patrón Tequila

WASHINGTON—Covington advised Bacardi Limited in its definitive agreement to acquire Patrón Spirits International AG and its PATRÓN® brand, the world’s top-selling ultra-premium tequila, from John Paul DeJoria, a founder of Patrón. The transaction reflects an enterprise value for Patrón of $5.1 billion. The transaction follows the successful relationship the ...

Cybersecurity & Privacy Cases To Watch In 2018

Kurt Wimmer is quoted in a Law360 article providing a roundup of cybersecurity and privacy cases to watch in 2018. Commenting on LabMD Inc. v. Federal Trade Commission, Wimmer says, "Both the courts and the FTC are grappling with the meaning of 'harm,' and I believe 2018 will be the year when these efforts will converge, with a more sophisticated understanding ...

Cybersecurity & Privacy Predictions For 2018

Kurt Wimmer and John Buchanan are quoted in a Law360 article providing cybersecurity and privacy predictions for 2018. Wimmer says, once Europe's General Data Protection Regulation (GDPR) is in force, non-EU countries around the world will begin looking at privacy regimes based on the 1995 Directive [which the GDPR will replace] and think about whether they ...

A Year-End Thanks to Our Readers

As 2017 ends, all of us at InsidePrivacy are grateful for the attention and engagement of our readers. This has been an excellent year for our blog, and we’d like to share with you some information about InsidePrivacy and its readers. First, there are more of you than ever — in fact, an 11% year-over-year...… Continue Reading

Financial Times Names Covington to 2017 North America Innovators List

SILICON VALLEY—The Financial Times has recognized Covington among the most innovative firms in 2017 in the category of "Enabling Business Growth," for advising "Tencent in its acquisition of a $8.6bn majority stake in Supercell, the Finnish gaming company, while maintaining Supercell’s creative culture and retaining its employees by introducing incentive ...

ESPN Ruling Further Narrows Video Privacy Law's Reach

Kurt Wimmer is quoted in a Law360 article regarding the Ninth Circuit’s ruling in a case involving the disclosure of user app data to a third-party. "The court recognized that the concept of being publicly identified has limits, despite technological evolution," says Wimmer. "By reducing ambiguity around what qualifies as PII, this decision permits content and ...

China Revises Rules on Commercial Encryption Products

In a draft regulation released earlier this year, China proposed regulating the import, export, manufacture, sale, and use of “commercial encryption products,” building on a patchwork of regulations.1 These regulations have focused on restricting the import and use of encryption products produced by certain manufacturers, and many entities have expressed concern ...

The EU Gets Serious About Cyber: The EU Cybersecurity Act and Other Elements of the "Cyber Package"

Last week, in his annual State of the European Union Address, the President of the European Commission Jean-Claude Juncker called out cybersecurity as a key priority for the European Union in the year ahead. In terms of ranking those priorities, President Juncker placed tackling cyber threats just one place below the EU leading the fight against climate change, ...

China Seeks Comments on Updated Draft of Cross-Border Data Transfer Security Assessment Standard

On August 31, 2017, China’s National Information Security Standardization Technical Committee (“NISSTC”), a standard-setting committee jointly supervised by the Standardization Administration of China (“SAC”) and the Cyberspace Administration of China (“CAC”), released an updated draft of the Information Security Technology - Guidelines for Data Cross-Border ...

FTC Blogs Help Define Reasonable Data Security Attorneys Say

Kurt Wimmer is quoted by Bloomberg BNA in an article regarding the FTC's weekly data security investigation blog. According to Wimmer, the FTC’s "Stick With Security” blog is “serving a highly useful role.” He adds that the initiative is “taking many of the key principles from the ‘Start with Security’ program and the FTC’s consent orders and rolling them out in ...

Wash. Expands Biometric Privacy Quilt With More Limited Law

Kurt Wimmer is quoted in a Law360 article regarding the State of Washington's new law governing the collection and use of consumers’ biometric information. According to Wimmer, the law “is more sensible and targeted than some other biometric laws because it applies only to biometric identifiers stored in a database that matches those identifiers to specific ...

What To Watch As LabMD, FTC Square Off Over Data Security

Kurt Wimmer is quoted in a Law360 article regarding LabMD Inc. v. FTC , where the FTC will attempt to justify its data security enforcement authority. “The LabMD argument will provide an important window into how the new FTC will deal with the all-important question of 'harm' in the context of data security enforcement actions,” says Wimmer. “The argument ...

Oral Argument in LabMD Case to Test FTC’s Enforcement Authority

Kurt Wimmer is quoted in a Bloomberg BNA article regarding LabMD Inc. v. FTC , where the FTC will attempt to justify its data security enforcement authority. According to Wimmer, "[o]ral argument “presents an opportunity for the FTC to explain its current view of ‘harm,’ and how it should be applied in the LabMD case."

Cloud Security Alliance Releases Guidance for Securing Connected Vehicles

The increasing connectivity of vehicles has raised questions about how to maintain the security of connected vehicles. In response, the Cloud Security Alliance released on May 25, 2017 a 35-page research and guidance report on Observations and Recommendations on Connected Vehicle Security. The Cloud Security Alliance is a not-for-profit organization dedicated ...

China Releases Near-final Draft of Regulation on Cross-border Data Transfers

On May 19, 2017, the Cyberspace Administration of China (“CAC”) invited international stakeholders to attend a seminar to discuss an updated version of the Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (“the Measures”). Given that the Measures have an intended effective date of June 1, 2017, it is likely ...

FCC Chairman Releases Draft of New Net Neutrality Plan; Vote Scheduled for May 18

In a widely anticipated step, FCC Chairman Ajit Pai has released the text of a draft Notice of Proposed Rulemaking (“NPRM”) proposing to change the legal framework that governs broadband providers, eliminate the “Internet conduct standard” for evaluating broadband provider practices on a case-by-case basis, and seek comment on whether to keep, modify, or ...

CNN Video Data Win Leaves Spokeo Door Open For App Users

Kurt Wimmer is quoted in a Law360 article regarding the Eleventh Circuit's decision to reject a proposed class action brought by a CNN app user claiming that CNN violated the Video Privacy Protection Act. According to Wimmer, "Unlike the Yershov court, the CNN panel seems to understand how apps actually work, which will be helpful going forward."

China Seeks Public Comments on Draft Regulation of Cross-Border Data Transfer

On April 11, 2017, the Cyberspace Administration of China (“CAC”) released a draft of the Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (“the Draft Measures”) for public comment (official Chinese version available here; Covington’s translation of the Draft Measures is appended at the end of this alert).

China Seeks Public Comments on Draft Regulation on Cybersecurity Review of Network Products and Services

On February 4, 2017, the Cyberspace Administration of China (“CAC”) released the draft Measures on the Security Review of Network Products and Services (“the draft Measures”) for public comment (official Chinese version available here; Covington’s translation of the draft Measures is here). The comment period ends on March 4, 2017.

The EU-U.S. Privacy Shield: What’s New and What’s Next?

At a joint press conference on July 12, 2016 in Brussels, EU Commissioner for Justice, Consumers and Gender Equality, Věra Jourová and the U.S. Secretary of Commerce, Penny Pritzker, presented the Privacy Shield (see Press Release here, Adequacy Decision text here, Annexes here, Communication here, and Q&A factsheet here). The press conference followed the ...

Covington Represents Tencent in $8.6 Billion Acquisition

SILICON VALLEY—Covington advised Tencent Holdings Limited, a leading provider of internet service in China, in connection with its acquisition of a majority stake in Supercell from SoftBank. A consortium established by Tencent will acquire up to 84% of Supercell for $8.6 billion in a transaction valuing Supercell at approximately $10.2 billion. Supercell is a ...

China Likely to Impose New Cybersecurity Regulations in 2016

As readers of this blog know, China has been increasingly active in proposing new cybersecurity and privacy regulations. In late 2015, China enacted a new counter-terrorism law. In August 2015, it issued a draft network security law. Also last summer, China issued new draft regulations on Internet advertising and clarified requirements for text marketing. ...

Commerce Department Seeks Comments on Internet of Things Policy Issues

On April 6, the National Telecommunications and Information Administration (NTIA), part of the U.S. Department of Commerce, issued a Request for Comment (RFC) seeking public feedback on the benefits, challenges, and potential roles for the government in fostering the advancement of the Internet of Things (IoT). NTIA issued the RFC as part of the Commerce ...

Privacy Shield: Top Five Reasons It’s Tougher Than the Safe Harbor, Whether You Should Certify, and Next Steps

As noted in our post yesterday, the text of the EU-U.S. Privacy Shield, the upcoming trans-Atlantic data-transfer framework between the EU and U.S. to replace the invalidated U.S.-EU Safe Harbor, has been released by the U.S. Department of Commerce. Commerce’s release coincided with the release of a draft adequacy decision by the European Commission. A...… ...

This is the first business to (legally) fly drones around Americans’ heads

Kurt Wimmer is quoted in this MarketWatch article regarding the FAA’s decision to allow Cape Productions, a drone video startup, to fly drones hundreds of feet closer to people than previously permitted. According to Wimmer, the FAA’s approval for Cape Productions sets a “much more realistic precedent” for future commercial drone usage.

Privacy Weekend: Provocative Articles We’re Reading Now

Needless to say, the document most of us are reading now is the 209-page General Data Protection Regulation, just agreed upon by the institutions of the European Union. A few parts are quite a page-turner. (Parental consent for under-16s to access the Internet? Srsly?) But even with this scintillating read, we find ourselves reaching for...… Continue Reading

Administrative Law Judge Dismisses FTC’s LabMD Complaint, Finding Insufficient Evidence of “Substantial Injury” to Consumers

On Friday, November 13, Federal Trade Commission (FTC) Chief Administrative Law Judge Chappell issued an Initial Decision dismissing the FTC’s complaint against LabMD, on the ground that the Commission’s staff had failed to carry its burden of demonstrating a “likely substantial injury” to consumers resulting from LabMD’s allegedly “unfair” data security ...

Covington Tackles Vendor Cybersecurity Risks in New Book for Corporate Directors and Officers

WASHINGTON, DC, October 13, 2015 - Covington addresses the critical issue of how to manage risks associated with third-party outsourcing in Navigating the Digital Age: The Definitive Cybersecurity Guide for Directors and Officers. Published in collaboration with Palo Alto Networks and the New York Stock Exchange, the book provides boards, executives and ...

Privacy Weekend: Provocative Articles We’re Reading Now

As readers of the InsidePrivacy blog know, we often save some fun reading on privacy issues for the weekend, given the crush of business during the week. This week, we’re up for some digital magazine reading. It’s refreshing when privacy issues burst into the mainstream consciousness, and we have two great examples of that this...… Continue Reading

5 cybersecurity questions in-house counsel should consider in light of the Sony breach

Covington's David Fagan, James Garland and Kurt Wimmer have authored this article on questions that in-house counsel should be able to answer about his or her organization’s legal and business cybersecurity risk profile: "In the wake of the much publicized North Korean cyber-attacks against Sony — as well as recent favorable rulings for the plaintiffs in class ...

Key Drone Restrictions In FAA And White House Proposals

Covington's Kurt Wimmer and Jack Schenendorf have authored this article on drone restrictions announced in FAA and White House proposals: "On Sunday, the Federal Aviation Administration and White House addressed the growing use of unmanned aircraft systems by the private sector and government." "The White House released a memorandum that imposes privacy ...

Covington, In-House Teams Get an Assist on NBA's TV Mega-Deal

Covington is featured in this article regarding the firm advising the National Basketball Association on a media rights deals with Walt Disney Co. and Time Warner Inc.’s Turner Broadcasting System. "The agreement comes on the heels of the NFL's renewal of its Sunday Ticket game package with DirecTV last week. Covington counseled its longtime client the NFL on ...

Covington Advises NFL on DirecTV Deal

WASHINGTON, DC, October 3, 2014 — Covington & Burling represented the National Football League in connection with its recently announced deal to extend DirecTV's exclusive rights to carry NFL Sunday Ticket in a multi-year agreement. The agreement also extends DirecTV’s rights to stream NFL Sunday Ticket, a package that enables subscribers to view out-of-market ...

Defining privacy in the age of wearable cameras

Covington partner Kurt Wimmer is quoted in this article regarding the legal implications of wearable cameras: "The current laws on privacy take hidden cameras and other Glass-type devices into account,” says Wimmer, whose clients include Facebook, Microsoft, Samsung, CBS, Viacom, and the National Football League. “There have been tiny cameras for a long time, ...

Best Lawyers Names Covington’s Stuart Eizenstat and Gregg Levy Lawyers of the Year

WASHINGTON, DC, August 18, 2014 — Best Lawyers named Covington & Burling’s Stuart Eizenstat and Gregg Levy each a 2015 “Lawyer of the Year” in international trade and sports law, respectively, citing their “abilities, professionalism and integrity.” Overall, Covington lawyers received 217 individual mentions in 58 areas of law in the newly released annual survey ...

Executive Order on Drone Privacy

As reported in the press, President Obama plans to issue an Executive Order authorizing the Commerce Department’s National Telecommunications and Information Administration (“NTIA”) to coordinate the development of privacy guidelines for commercial drone operations. More specifically, we understand that NTIA would coordinate a “multi-stakeholder process” — a ...

FTC Ratches Privacy Enforcement, With No Slowdown In Sight

Covington partner Kurt Wimmer is quoted in this article regarding the Federal Trade Commission pursuing companies such as Snapchat Inc. and Fandango LLC over allegedly misleading privacy promises and lax data security. "To me, the FTC's work in the first half of 2014 has been more about security than privacy — both in advocating for its ability under Section 5 ...

Covington Advises Gannett on $2.2 Billion Acquisition of Belo

WASHINGTON, DC, December 23, 2013 — Covington & Burling represented Gannett Co., Inc. in obtaining Federal Communications Commission approval of its acquisition of Belo Corp. Completed today, the $2.2 billion transaction nearly doubles the broadcast television portfolio of Gannett. The Covington team was led by Jennifer Johnson with assistance from Kurt ...

Covington Advises Gannett in $2.2 Billion Deal with Belo

WASHINGTON, DC, July 2, 2013 — Gannett Co., Inc. and Belo Corp. announced on June 13 that they have entered into a definitive merger agreement in which Gannett will acquire all outstanding shares of Belo for $13.75 per share in cash, or approximately $1.5 billion, and assume $715 million of Belo’s existing debt. Covington & Burling advised Gannett, the ...

Covington Named ‘Privacy & Consumer Protection Practice Group of the Year’

WASHINGTON, DC, January 22, 2013 — For the second straight year, Law360 named Covington & Burling’s global privacy and data security practice as one of the top five “Privacy & Consumer Protection Practice Groups of the Year.” In a profile highlighting the firm’s privacy-related work, Law360 noted the group’s recent litigation win for LinkedIn Corp. In that case, ...

Covington Lawyers Recognized by D.C. Super Lawyers

WASHINGTON, DC, May 2, 2012 — D.C. Super Lawyers selected 64 Covington & Burling lawyers for its 2012 list of top legal talent. Super Lawyers selects no more than five percent of the total lawyers who practice in Washington based on peer review and the publication’s independent research. Deborah Garza and Robert Long have been named among the “Top 100” for ...

Law360 Names Covington ‘Privacy & Consumer Protection Practice Group of the Year’

WASHINGTON, DC, January 9, 2012 — Law360 named Covington & Burling’s global privacy & data security practice as one of the top five “Privacy & Consumer Protection Practice Groups of the Year.” In a profile about the firm published on Jan. 5th, Law360 pointed to Covington’s broad practice in assisting clients in transactions, on advisory matters, in social ...

Washingtonian Names 25 Covington Attorneys ‘Top Lawyers’

WASHINGTON, DC, November 23, 2009 — Twenty-five Covington & Burling LLP attorneys are recognized as “Top Lawyers” in the December issue of Washingtonian magazine. The list, compiled by the magazine’s editorial staff, identifies leading lawyers in the Washington area. Of the “Top Lawyers,” Washingtonian identified 30 as “stars of the bar.” Among them is Michael ...

View More View Less

Our Website Uses Cookies

Kurt Wimmer

Representative Matters

Memberships and Affiliations

News and Insights (Showing 5 of 166) (Showing 166 of 166)