Paul Otto

Paul has coordinated and managed hundreds of cybersecurity assessments and data incident responses, as well as associated enhancement/remediation plans.

Paul works with legal counsel and security officers throughout the lifecycle of cybersecurity risk management and incident response. Because many organizations have limited in-house cybersecurity legal capacity, Paul embraces the role of outside counsel by working alongside executive and information security teams to manage risk, oversee corporate governance, and help identify and capitalize on risk-reducing opportunities for enhanced data protection.

Paul regularly advises clients on security-related risks in mergers and acquisitions and governance matters, as well as advising on appropriate contractual language for safeguarding sensitive data such as health and financial information. Paul also assists clients in evaluating the data security practices of vendors and other strategic partners.

Paul's cybersecurity legal representation includes organizations across a wide range of industries, including the technology, life sciences and health care, mobility and transportation, energy, education, and financial sectors.  Whether it is cloud computing, mobile technology, critical infrastructure, the Internet of Things, or any number of technology-related areas, Paul regularly advises clients on compliance with various data security laws, regulations, and standards.

Paul has a master's degree in computer science and a bachelor's degree in electrical and computer engineering. He clerked for Chief Justice Christine M. Durham of the Utah Supreme Court.