Marissa R. Boynton

  • Partner
  • 555 Eleventh Street, NW
  • Suite 1000
  • Washington, D.C. 20004-1304
  • USA
  • T +1.202.637.3307


Marissa Boynton advises US and global clients across all market sectors on cybersecurity and data privacy, data breach response, and consumer protection.

Ms. Boynton provides comprehensive advice on regulatory compliance, investigations, and litigation related to:

  • Privacy and data security-related regulatory enforcement
  • Privacy and data security compliance and program management
  • Complex data breach incidents, including forensic investigations
  • Computer fraud and cybercrime
  • Advertising and marketing practices, as well as other consumer protection issues

Ms. Boynton represents a broad range of clients from emerging companies to global market leaders. She has particular knowledge of the technology, healthcare, retail, and professional services sectors.

Ms. Boynton advises clients on various laws governing data privacy and consumer protection, including those under the California Consumer Protection Act (CCPA), Health Insurance Portability and Accountability Act (HIPAA), Gramm Leach Bliley, Children’s Online Privacy Protection Act (COPPA), Federal Trade Commission Act, CAN-SPAM, and telemarketing laws, as well as self-regulatory and online behavioral advertising guidelines.

Ms. Boynton frequently represents clients before the Federal Trade Commission (FTC), state attorneys general, and other government agencies and bodies. Ms. Boynton has also represented clients in high stakes litigation matters in state and federal courts. In 2021, Ms. Boynton was recognized by Law360 as a Rising Star, Privacy and named to the prestigious Data Privacy 40 under 40 by Global Data Review.

Ms. Boynton maintains an active pro bono practice. She has represented inmates suffering from mental illness in a class action lawsuit against the Bureau of Prisons as well as individuals in immigration proceedings, and has advised nonprofit organizations on data privacy and cybersecurity matters.

Prior to joining the firm, Ms. Boynton clerked for United States District Judge Liam O’Grady in Alexandria, Virginia.


Ms. Boynton’s experience includes representing:

  • A significant social media company in matters before the FTC, state attorneys general, and international regulatory bodies on issues related to privacy and security, including in connection with COPPA investigation
  • An email marketing platform in connection with California Attorney General enforcement inquiry regarding compliance with CCPA
  • An alarm monitoring company in connection with FTC investigation into telemarketing practices, and advising on affiliate marketing compliance
  • A marketing analytics company in connection with an FTC investigation related to a disclosure of sensitive personal information
  • MyLife, Inc. in connection with various government investigations and consumer class actions challenging advertising and online marketing and e-commerce practices

Thought Leadership

  • FTC Serves Notice of Enforcement Approach on Endorsements and Testimonials -  October 21, 2021
  • Virginia Consumer Data Protection Act: Second US State Passes Comprehensive Data Privacy Legislation -  March 05, 2021
  • FTC Chair Rebecca Slaughter Outlines Data Privacy Enforcement Agenda -  February 13, 2021
  • CCPA Housekeeping Reminders -  December 17, 2020
  • What’s New, What It Means: California AG Releases Modified CCPA Regulations -  February 13, 2020
  • California Consumer Privacy Act Draft Regulations: What’s New, What’s Next -  October 22, 2019
  • The California Consumer Privacy Act’s Amendments Are Final: What Businesses Need to Know -  September 20, 2019
  • MD Anderson v. OCR: Key Takeaways -  September 20, 2018
  • Ransomware Attacks: When Is Notification Required? -  April 26, 2017
Ms. Boynton has been named to Global Data Review’s 40 Under 40 list for her work on privacy, cybersecurity, and consumer protection issues.Global Data Review 2021
Bar Qualification
  • District of Columbia
  • JD, University of Virginia School of Law, 2009
  • BA, Duke University, 2005
  • Retail & Consumer Products
  • Technology
  • Communications Law
  • White Collar Defense & Investigations
  • Securities Litigation & Professional Liability
  • Litigation & Trial Practice
  • Complex Commercial Litigation
  • Connectivity, Privacy & Information