Phyllis Sumner

Phyllis Sumner is a Partner and the firm’s Chief Privacy Officer. She leads our Data, Privacy and Security practice. Phyllis regularly counsels corporate boards, senior executives and other clients regarding data breach prevention, emergency response, remediation, compliance, regulatory enforcement, internal corporate investigations and other critical privacy and data security concerns.

As a crisis manager, Phyllis works closely with clients’ legal, compliance and business teams to strategize, manage and defend when significant privacy and data security issues arise. She assists her clients with developing mature incident response plans and leads them through security incidents, including investigations, containment, remediation, communications, and contractual and legal obligations. She represents clients defending against class actions resulting from alleged consumer protection and privacy violations, and data security incidents. In 218 and 216, Cybersecurity Docket named Phyllis to its Incident Response 3, which lists “the 3 best and brightest Incident Response attorneys” in the U.S. and Law36 named her Cybersecurity MVP in 217 and Privacy MVP in 216.

Phyllis also represents clients in complex litigation involving the False Claims Act, RICO, the Fair Credit Reporting Act and fraud. She is known for her negotiation and advocacy skills in and out of the courtroom. Law36 named her “Healthcare MVP” in 214 and she has been a Georgia “Super Lawyer” since 213. Atlanta Magazine named her as a “Woman Making a Mark” in 216 and the Daily Report named her a “Distinguished Leader” in 217.

Previously, Phyllis served as an Assistant U.S. Attorney in the Northern District of Illinois and the Northern District of Georgia. She successfully prosecuted high profile cases such as Eric Rudolph, the Centennial Olympic Park bomber, as well as cases involving public corruption, domestic terrorism, credit card fraud, money laundering, healthcare fraud and other complex criminal matters.