Bart Huffman

Bart W. Huffman is a data strategy, security and privacy attorney in Holland & Knight's Houston office. Mr. Huffman has a systems engineering and intellectual property (IP) background, as well as deep experience in privacy and cyber security matters and sophisticated technology transactions. He provides legal advice concerning a wide range of matters, particularly in the energy, healthcare, financial, transportation and other critical infrastructure sectors.

Mr. Huffman leads engagements involving data, information systems and/or operational technology in connection with large-scale software as a service (SaaS) and other cloud-platform implementations, ransomware and data breach response, technology vendor contracting and oversight, domestic and international privacy and cybersecurity compliance projects and programs, business intelligence and data analysis, terrestrial and satellite Wi-Fi networks, software and information systems development and licensing, assessment and allocation of legal and contractual cybersecurity risks, and governance advice. He often serves as lead "breach coach" for critical infrastructure companies, and he has served as lead outside counsel for investigations, recovery, negotiations, notifications and regulatory compliance in ransomware and other cyber and data security incidents – company-wide or system-specific, third-party or first-party – for more than 15 years.

In addition, Mr. Huffman is a Certified Information Privacy Professional – U.S. and Europe (CIPP/US and CIPP/E), and a cybersecurity fellow at the Robert Strauss Center for International Security and Law at The University of Texas School of Law in Austin.

Mr. Huffman regularly supports clients both in the negotiation of information technology (IT) transactions and license agreements, and in regard to compliance with privacy and data protection regulation on a national and international scale, including with respect to laws such as the California Consumer Privacy Act (CCPA), Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), Children's Online Privacy Protection Act (COPPA) and the European Union (EU) General Data Protection Regulation (GDPR). He is also experienced in matters involving the Payment Card Industry Data Security Standard (PCI DSS) and other payment systems privacy and security issues.

Mr. Huffman counsels clients as to the legal aspects of both IT and operational technology (OT) security matters. He provides analysis and negotiates agreements concerning artificial intelligence (AI), data enrichment and data analytics, including associated issues of ownership, licensing, implementation and use. As a litigator, he has appeared in federal and state courts across the country, including in precedent-setting online copyright and privacy matters. He is conversant in and has counseled leading internet service providers with respect to the Digital Millennium Copyright Act (DMCA).

Mr. Huffman also serves as an adjunct professor at The University of Texas School of Law, where he teaches U.S. and EU privacy law.