Information security and privacy lawyer