Timothy M. Hayes

Overview

Certified Information Privacy Manager (CIPM) and Certified Information Privacy Professional - United States (CIPP/US) Tim Hayes guides businesses and other clients through the complex legalities of data breach, privacy, and cyber liability issues, including biometric privacy matters. Tim brings proven success to crafting customized compliance frameworks that reflect each client's unique risk profile and industry requirements, often saving them from regulatory problems, governmental scrutiny, and potentially severe financial penalties. He is known for his proficiency in advising on the design and execution of incident response plans and provides "tabletop" exercises that help clients prevent and prepare for data security incidents.

As breach counsel, Tim assists clients faced with responding to active computer system intrusion, ransomware, and business e-mail compromise scenarios. He skillfully navigates companies through regulatory and compliance matters following a data security event with a focus on safeguarding client interests when responding to post-data breach investigations. His advisory acumen frequently involves coordinating with federal agencies, such as the FBI and Secret Service, during critical incidents. Tim's measured approach to problem solving and legal and technical fluency have repeatedly turned chaotic breach scenarios into manageable, structured response efforts with minimal business disruption.

Clients appreciate that Tim manages a 24-hour hotline on behalf of various cyber risk insurers. He provides legal triage solutions to policyholders under these programs and assembles the appropriate incident response team in real time. On behalf of insurance carriers and their clients, Tim defends organizational interests across multi-million-dollar ransomware and extortion negotiations. He brings wide-ranging competencies to advising on wire fraud and fraudulent funds transfers and helps those he serves to recover stolen funds. Tim's insight and tactical guidance often make the difference between a contained incident and a full-blown organizational crisis that spirals into litigation.

Prior to joining the firm, Tim spent more than a decade representing product, premises, and contractor defendants in asbestos litigation across Illinois and Missouri. This litigation background enhanced his ability to manage sophisticated evidentiary challenges and develop compelling defensive narratives that now serve his cybersecurity clients exceptionally well. Tim's background in navigating large-scale toxic tort cases equipped him with the precise attention to detail and procedural rigor that proves invaluable when documenting breach responses and preparing clients for potential regulatory inquiries and litigation.

Certifications

• Certified Information Privacy Manager (CIPM), International Association of Privacy Professionals, 2017
• Certified Information Privacy Professional - United States (CIPP/US), International Association of Privacy Professionals, 2016

News

Professional

• Member, International Association of Privacy Professionals, 2016 to Present