Hadrian Luo is an associate in the New York office of Latham & Watkins. Hadrian is a member of the firm’s Litigation & Trial Department and concentrates his practice on data privacy and cybersecurity.

Hadrian represents companies in complex litigation involving data privacy and cybersecurity issues. He defends technology companies in high-stake regulatory investigations and inquiries concerning privacy and cybersecurity before the US and international government regulators and agencies.

Hadrian counsels technology companies on product related issues involving data privacy , cybersecurity, minor protection, social media law, as well as marketing and advertising law. He also has substantial experience advising companies on compliance with the DOJ’s new Data Security Program concerning cross-border data transfer.

In addition, Hadrian has handled many high-profile cybersecurity incidents over the years. He regularly advises companies on cybersecurity risks and assists in developing comprehensive incident response strategies, to help companies effectively handle and mitigate the impact of cybersecurity incidents.

Hadrian maintains an active pro bono practice. His pro bono experiences include preparing an amicus brief for a monumental Supreme Court case on LGBTQ rights, defending the civil and constitutional rights of workers who were subject to the biggest immigration raid in recent history in a class action, filing a lawsuit against human traffickers on behalf of the victims, and representing victims of domestic violence in seeking immigration relief.

Hadrian was a Mordecai Scholar at Duke Law School. During law school, he served as the inaugural membership editor of Duke Law Journal in charge of increasing diversity among the journal membership. Hadrian also holds a Harvard Law School Executive Education certificate on Computer Science for Lawyers.

Prior to joining Latham, Hadrian was a judicial intern for Judge James Wynn of the United States Court of Appeals for the Fourth Circuit, a legal extern at the ACLU in Washington, D.C, and worked at two other leading international law firms in New York City.  

Hadrian's experience includes representing:

Litigation

  • A major entertainment company in consumer data breach class action resulting from a cyberattack
  • A global technology company, in a consolidated consumer class action alleging privacy claims in relation to the company’s apps
  • A global e-commerce platform, in consumer class actions and mass arbitration concerning data privacy and security claims
  • A global consumer product company in litigation against its business vendor in relation to a high-profile cyberattack
  • A virtual-reality product manufacturer in connection with video game addiction lawsuit

Government Investigations

  • The developer of a top global mobile game, in an FTC investigation regarding COPPA and consumer protection
  • A top global provider of cybersecurity products, in an FTC investigation regarding the use of consumer data for advertising purposes
  • Numerous companies in state AG investigations concerning cybersecurity incidents
  • A major social media platform in a Texas AG investigation concerning compliance with the Texas state privacy laws
  • A global entertainment company in an investigation by the California Privacy Protection Agency regarding compliance with the California Consumer Privacy Act 
  • A video streaming platform in a Texas AG investigation concerning compliance with the Texas state privacy laws
  • A global technology company, in an investigation before the Irish Data Protection Commission regarding processing of user data under the GDPR

Incident Response

  • An online crypto trading platform in connection with an insider data breach concerning customer data
  • A leading data center platform in connection with a ransomware attack
  • A healthcare provider in connection with a ransomware attack and breach of protected health information under HIPAA
  • A gaming and hospitality company in connection with a social engineering attack
  • A global food services company in connection with a ransomware attack
  • An online-streaming platform in connection with a ransomware attack
  • A technology company in connection with internal employee breach
  • An investment firm in connection with a ransomware attack

DOJ's Data Security Program

Hadrian has advised a wide range of companies on compliance with the DOJ’s Data Security Program, including:

  • A global technology conglomerate
  • A cloud service provider
  • A leading e-commerce platform
  • Numerous global gaming companies
  • A global logistics company

Bar Qualification

  • New York

Education

  • J.D., Duke University School of Law, 2018
    cum laude
  • BA in Political Science, Yale University, 2015
    cum laude

Languages Spoken

  • English
  • Chinese (Mandarin)