Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard
Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.
Blockchain LawPart 2 of a two-part seminar on cryptocurrency and blockchain, covering consensus protocols, decentralized systems, digital signatures, transactions, network incentives, mining, and governance. The session closes with key takeaways relevant to legal and finance-sector professionals.
Daniel B. Garrie
This webinar examines how artificial intelligence is being used across the eDiscovery and broader litigation process, including a comparison of competing AI technologies and relevant professional conduct considerations. Panelists also explore where legal AI is headed and what that means for organizations and their advisors.
Daniel B. Garrie
Cyber IncidentsThis seminar prepares board members, their legal advisors, and security teams to navigate cyber incident response, covering the current risk landscape, foundational cybersecurity concepts, regulatory guidance from the SEC and FTC, and the role of cyber risk assessments. It concludes with a review of recent relevant case law.
Daniel B. Garrie
eDiscoveryThis session covers eDiscovery fundamentals and the ethical obligations attorneys carry, including how electronically stored information (ESI) is handled in litigation, the challenges that arise, and practical compliance guidance. Panelists also review recent relevant case law.
Daniel B. Garrie
Digital ForensicsPart 2 of a two-part seminar covering how digital forensics reports are structured and produced, what professionals need to know when working alongside forensics experts, and notable cases where computer forensics played a decisive role, closing with practical takeaways.
Daniel B. Garrie
Privacy LawPart 2 of a two-part series examining cybersecurity in the healthcare sector, this session covers the five titles of HIPAA, including the Privacy and Security Rule, proposed amendments, the enforcement rule, and violations. It concludes with a breakdown of the HITRUST Common Security Framework (CSF).
Daniel B. Garrie
Cyber IncidentsThis webinar introduces the legal implications of cyberwar, covering the current threat landscape, key foreign actors, and industries at risk. Panelists provide an overview of relevant international and domestic cybersecurity law—including the Tallinn Manuals—and examine what foreign cyber aggression means in practice for organizations and their advisors.
Daniel B. Garrie
eDiscoveryThis webinar explains how legal teams engage with special masters in federal court, covering their role, types, and authority under applicable rules, including the 2019 ABA Guidelines for their appointment and use. It concludes with five practical principles for working effectively with special masters.
Daniel B. Garrie
Cyber IncidentsThis webinar guides legal, security, and business professionals through the current state of cyber and hybrid warfare, covering the threat landscape, applicable international and domestic law, the implications for insurance policies and war exclusions, and practical strategies for protecting organizations.
Daniel B. Garrie
Privacy LawThis seminar covers the New York Department of Financial Services cybersecurity regulation (23 NYCRR 500), one of the first of its kind in the U.S., including its six regulatory minimum standards and the role of the NYDFS. Panelists also discuss the amendments proposed in late 2022 that would introduce additional policy, technical, and leadership requirements for covered organizations.
Daniel B. Garrie
Cyber IncidentsPart 2 of a two-part series on third-party vendor risk and data breaches, covering the right questions to ask vendors after a breach is disclosed, how to review contracts for breach-notification and preventative provisions, and governance measures organizations can take to reduce vendor cyber risk.
Daniel B. Garrie
Cyber IncidentsThis seminar examines the 2023 National Cybersecurity Strategy with a Deputy General Counsel from the Office of the National Cyber Director, covering the strategy's five pillars, key policy shifts, and related executive orders. Attendees leave with practical takeaways on how the strategy affects business risk management and compliance obligations.
Daniel B. Garrie
Securities LawThis session walks legal, technical, and business professionals through how patent law applies to software, covering what can and cannot be patented, key court decisions on software eligibility, and common issues that arise in patent disputes. It closes with a look at where software patents stand today and how AI-assisted development tools are beginning to affect that landscape.
Daniel B. Garrie
eDiscoveryThis webinar covers how smartphone data—including text messages and other electronically stored information—is collected, managed, and used in litigation. Participants will explore the Federal Rules of Civil Procedure and Federal Rules of Evidence as they apply to smartphone evidence, with a focus on the requirements for admissibility.
Daniel B. Garrie
Cyber IncidentsThis seminar walks legal, security, and business professionals through the data breach mediation process, covering how breaches occur, when mediation is the right approach, and what to consider when selecting a mediator and form of mediation.
Daniel B. Garrie
InsurancePart 2 of a two-part seminar on cyber insurance, where panelists examine practical challenges organizations face—including coverage limitations, gaps in the application process, and policy sub-limits—and draw on recent litigation to offer concrete takeaways for businesses and their advisors.
Daniel B. Garrie
Cyber IncidentsThis session covers the cybersecurity threats currently affecting law firms, including a review of relevant guidance, regulations, and recent data breaches, while examining how tabletop exercises and risk assessments can help organizations identify and address vulnerabilities. Panelists also discuss broader strategies for reducing cyber risk.
Daniel B. Garrie
Blockchain LawThis seminar introduces central bank digital currencies (CBDCs) to a broad professional audience, covering the basics of central banking, fiat currency, and how central and commercial banks interact, alongside an overview of modern payment systems, stablecoins, and tokenization. Panelists also survey CBDC initiatives underway globally and close with a discussion of the key challenges, open questions, and practical considerations CBDCs present for organizations and their advisors.
Daniel B. Garrie
Cyber IncidentsThis seminar reviews a decade of executive orders and presidential directives on cybersecurity, covering key actions from the Obama, Trump, and Biden administrations, including the 2023 National Cyber Strategy. Panelists discuss what these orders mean in practice for businesses and their legal advisors.
Daniel B. Garrie
CISO & CTOThis seminar walks through the facts, charges, verdict, and sentencing in U.S. v. Joseph Sullivan, the criminal case stemming from Uber's 2016 data breach and the alleged cover-up by its CISO. Panelists draw out the key takeaways for executives, security leaders, legal advisors, and others who want to understand what the case means for personal criminal liability in the aftermath of a data breach.
Daniel B. Garrie
Securities LawThis webinar examines how federal cybersecurity regulation applies to the financial sector, covering the Gramm-Leach-Bliley Act (GLBA), SEC guidance and proposed rules, and what these requirements mean in practice for businesses and their legal advisors.
Daniel B. Garrie
RansomwareThis webinar covers how ransomware attacks work, the U.S. threat landscape, and what the 2021 OFAC ransomware advisory means for payment decisions, while also explaining the role of digital forensics after an incident and sharing practical steps organizations can take to reduce their ransomware exposure.
Daniel B. Garrie
eDiscoveryThis seminar explains how mediation can be used to reduce eDiscovery costs, covering the mediator's role and the tradeoffs to weigh before pursuing this path. Attendees will learn how to prepare for eDiscovery mediation and what factors to consider when deciding whether it is the right approach for resolving eDiscovery disputes.
Daniel B. Garrie
Blockchain LawThis webinar introduces blockchain and cryptocurrency fundamentals to legal, business, and security professionals, covering how the technology works—including block contents, validation, and permissions—and the relationship between blockchain and different token types. It also reviews the current state of federal and state regulation and examines active cryptocurrency litigation and key cases.
Daniel B. Garrie
Cyber IncidentsThis seminar covers the cybersecurity risks associated with connected medical devices, walks through the December 2022 FD&C Act amendment (Section 524B) and the FDA's medical device cybersecurity guidance, and outlines what manufacturers should do to build security into devices and avoid delays in the premarket approval process.
Daniel B. Garrie
Cyber IncidentsThis seminar surveys the current cybersecurity landscape, distinguishes types of cyber threats by method, motivation, and impact, and reviews federal and state regulatory requirements. It offers practical guidance for legal, security, and business professionals on responding to cyber threats and communicating risk-management priorities across their organizations.
Daniel B. Garrie
eDiscoveryAs litigation increasingly involves large volumes of digital data, managing that data responsibly has become a significant cost and compliance concern for legal and business teams alike. This seminar covers what eDiscovery involves, common ethical pitfalls in handling electronically stored information, the obligations around accuracy and candor, and relevant case outcomes and sanctions tied to missteps in this area.
Daniel B. Garrie
Privacy LawThis seminar covers the California Consumer Privacy Act, including the consumer rights it established, how the 2022 CPRA amendments expanded its scope and definitions, the role of the California Privacy Protection Agency, and anticipated 2023 developments, with practical guidance for organizations managing compliance across an evolving multi-state privacy landscape.
Daniel B. Garrie
Digital ForensicsThis course covers how social media data functions as litigation evidence, including how to access app-stored or deleted content, meet preservation obligations, and avoid spoliation, with practical guidance on the authentication standards courts apply and recent case examples.
Daniel B. Garrie
Privacy LawThis seminar covers the right of publicity—an individual's control over commercial use of their name and likeness—with a focus on California and New York statutes, how it differs from other intellectual property rights, and how technologies such as deepfakes, social media, and data breaches are shaping its application. Participants will also review recent notable cases and practical steps for protecting individuals against unauthorized commercial use of their identity.
Daniel B. Garrie
Privacy LawThis seminar explains how the GDPR applies to American organizations that handle EU personal data, covering the roles of Data Controllers and Data Processors, how cross-border data transfers are regulated, and what liability businesses face for non-compliance, including real enforcement examples and a look at where enforcement trends are heading.
Daniel B. Garrie
eDiscoveryThis seminar introduces how artificial intelligence and machine learning work, examines how AI is being applied in legal practice including eDiscovery, and explores what the growing use of AI means for legal professionals navigating ethical and professional responsibilities.
Daniel B. Garrie
InsuranceThis course covers the fundamentals of cyber insurance, including how policies are structured, what they cover, and how underwriters evaluate risk. It also addresses current challenges in the cyber insurance market and reviews recent coverage disputes relevant to businesses and their legal and risk advisors.
Daniel B. Garrie
Securities LawThis seminar covers the SEC's cybersecurity enforcement role, its 2020 Cybersecurity and Resiliency Observations, and the 2023 Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, along with practical guidance for boards and senior executives on managing regulatory risk.
Daniel B. Garrie
Cloud ComputingThis seminar explains how cloud computing works and the different types of cloud services available, then examines how cloud attributes such as access, security, cost, and scalability apply to eDiscovery, along with the potential drawbacks of storing data in the cloud and practical ways to address those risks.
Daniel B. Garrie
eDiscoveryThis seminar examines how mediation can serve as a practical alternative to lengthy litigation when eDiscovery disputes arise, covering its advantages, disadvantages, the parties involved, and the mediator's role. It also walks through preparation best practices from both mediator and counsel perspectives, and identifies the circumstances where mediation can help reduce costs and simplify the process.
Daniel B. Garrie
Digital ForensicsDigital forensics is increasingly relevant across legal disputes, regulatory matters, and organizational investigations, and forensic neutrals serve as impartial third-party experts who help resolve those disputes objectively. This seminar covers how digital forensics works, how it differs from eDiscovery, the role of the forensic neutral compared to a special master, and practical guidance on when and how to engage one.
Daniel B. Garrie
eDiscoveryGenerative AI tools like ChatGPT can improve efficiency across legal and business contexts, but their misuse has already led to professional consequences. This seminar covers what AI and generative AI are, examines the ethical and practical risks of using these tools, highlights effective uses that support accuracy and productivity, and considers AI's near- and long-term impact on organizations and the legal profession.
Daniel B. Garrie
RansomwareThis seminar covers the ransomware threat landscape alongside both technical and legal risk-management approaches, including cyber risk assessments, regulatory compliance, corporate policy, stakeholder roles during an incident, and cyber insurance considerations. It closes with practical organizational strategies for reducing ransomware exposure.
Daniel B. Garrie
Digital ForensicsFollowing a cyber event, understanding what happened and how is often central to legal, regulatory, and business decisions. This seminar provides a practical overview of digital forensics—covering its key phases, how reports are structured, and what to keep in mind when working with forensic experts.
Daniel B. Garrie
eDiscoveryThis seminar covers how electronic data is managed during litigation, including what eDiscovery and electronically stored information (ESI) are, the legal ethics rules they implicate, and lessons from recent cases. Panelists share practical guidance to help legal, security, and business teams recognize common pitfalls and maintain compliant, defensible practices.
Daniel B. Garrie
eDiscoveryVirtual mediation has become a standard alternative to in-person dispute resolution, offering scheduling flexibility and reduced travel costs while presenting distinct logistical and confidentiality considerations. This seminar covers how mediation works, when it makes sense to pursue it, and the practical steps mediators and counsel recommend to address technical, communication, and confidentiality challenges in a virtual setting.
Daniel B. Garrie
Employment LawAs remote and hybrid work has become standard for legal professionals, it introduces ongoing responsibilities around client privacy and information security. This seminar examines ABA ethics guidance and relevant Model Rules on competence, client communication, and confidentiality in remote work settings, and offers practical best practices for maintaining ethical standards outside a traditional office environment.
Daniel B. Garrie
Cyber IncidentsThis seminar covers data breaches and cybersecurity fundamentals—including the distinction between cyber-attacks and data breaches and internal versus external threats—alongside the current regulatory environment, SEC cyber rules, breach-related legal obligations, and lessons drawn from post-breach litigation, liability, and insurance coverage.
Daniel B. Garrie
Digital ForensicsThis seminar examines how smartphone data is handled under the Federal Rules of Civil Procedure and Evidence, covering admissibility requirements and lessons drawn from recent cases as analyzed by subject-matter experts.
Daniel B. Garrie
eDiscoveryThis seminar examines how artificial intelligence—including generative AI—is being regulated at the state, federal, and international levels, and what that means for organizations and the professionals who advise them. Panelists cover how the technology works, the practical and ethical risks of using it, and what the evolving regulatory landscape means for legal and business operations.
Daniel B. Garrie
Blockchain LawThis course provides a practical foundation in blockchain technology and cryptocurrency, covering how the blockchain works, its real-world applications, validation methods, permissions, and the relationship between blockchain and different types of tokens. Panelists also walk through the existing regulatory framework—including agency, state-level, and Executive Order 14067 considerations—and review the current state of cryptocurrency litigation following increased SEC enforcement.
Daniel B. Garrie
Securities LawThis seminar examines how software patents affect business competition, investment decisions, and legal risk, including what courts have said about patentability standards, common litigation challenges, infringement considerations, and how technologies like AI are influencing patent law.
Daniel B. Garrie
Privacy LawThis seminar covers how the FTC oversees data privacy and security, including its enforcement authority, the GLBA Safeguarding Rule, and the rulemaking process. A panel of legal and technical experts also examines the Trade Regulation Rule on Commercial Surveillance and Data Security ANPR and recent cases that have shaped the FTC's regulatory authority.
Daniel B. Garrie
Securities LawA panel examines the SolarWinds cyberattack, the regulatory response it prompted—including Executive Order 14028 and the SEC's 2023 cybersecurity disclosure rules—and the significance of the June 2023 Wells Notice, which was the first to name a CISO directly. The discussion covers what this means for executive accountability and offers practical guidance for organizations navigating similar risks.
Daniel B. Garrie
eDiscoveryPractitioners examine how AI-based review tools are being used to manage large volumes of electronic data in discovery, including how recent shifts in how people work have added new complications to the process, and what broader changes AI may bring to legal practice.
Daniel B. Garrie
CISO & CTOThis session covers the CISO role and the information CISOs can provide in litigation, using the Uber CISO case and the SolarWinds Wells Notice to illustrate growing legal and regulatory exposure. It also reviews deposition fundamentals, practical guidance for deposing CISOs in technical cases, and how the Apex Doctrine applies in this context.
Daniel B. Garrie
RansomwareTechnical and legal experts explain how ransomware works and what today's threat environment looks like, covering practical risk management steps—including tabletop exercises, OFAC guidance on ransom payments, and disclosure obligations under the 2023 SEC cybersecurity rules. The session closes with cross-functional strategies for reducing ransomware exposure across the organization.
Daniel B. Garrie
CISO & CTOPanelists break down how software and programming work, covering key distinctions between programming languages and their role in machine learning. The session then explores how the internet functions as a network, offering practical context for anyone advising on, overseeing, or insuring technology-related matters.
Daniel B. Garrie
CISO & CTOPanelists explain cybersecurity fundamentals and define data breaches to show why the topic matters across organizations, then outline ten cybersecurity best practices for securing sensitive data. The session closes on the value of proactive cyber risk assessments and how preparation can reduce the impact of a breach when one occurs.
Daniel B. Garrie
Cyber IncidentsPanelists introduce the Computer Fraud and Abuse Act, explain how it has developed over time, and define the key terms needed to understand how it applies in practice. They walk through the seven categories of prohibited conduct, the associated damages and penalties, and examine a recent case to illustrate how the law operates.
Daniel B. Garrie
Privacy LawPanelists explain what HIPAA covers, which organizations it applies to, and what information it protects or excludes, then walk through the Privacy Rule's permitted uses and disclosures and review proposed rule changes along with their practical implications for healthcare organizations.
Daniel B. Garrie
Privacy LawPanelists provide an overview of the GDPR, its scope, and key exceptions, then walk through 2023 developments including the EU's shift toward centralized enforcement, how penalties are determined, and notable fines such as the record action against Meta. The session closes with a look at what organizations can expect going forward and practical guidance for compliance.
Daniel B. Garrie
Cyber IncidentsPanelists explain what zero-day exploits are, how they differ from common cyberattacks, and what data is at risk when one occurs, using a real breach as a reference point. The discussion also covers relevant protections and prohibited conduct under the CFAA, along with practical defense strategies including tools and incident response planning.
Daniel B. Garrie
Securities LawPanelists explain the background and intent of the SEC's 2023 cybersecurity rules, covering reporting requirements and the responsibilities of management and the board. They also address the tension between mandatory disclosure and protecting trade secrets, and offer practical guidance for corporations working to implement the rules.
Daniel B. Garrie
Privacy LawPanelists walk through the California Consumer Privacy Act, the rights it provides to California residents, and how the CPRA amendment broadened the definition of personal data and shifted rulemaking authority. The session then reviews key 2023 developments and outlines expectations for 2024, including updates on the delayed enforcement timeline.
Daniel B. Garrie
Cyber IncidentsPanelists review the major cyber threats and attack methods of 2023, including the MOVEit breach, and walk through new and proposed SEC rules on cyber incident disclosure. The session then examines significant 2023 court cases, including Merck v. ACE American Insurance, drawing out practical lessons and what organizations should watch for going into 2024.
Daniel B. Garrie
Securities LawThis session reviews notable SEC enforcement actions in 2023 against cryptocurrency platforms including Binance, Kraken, and Coinbase, and examines the key legal and regulatory issues those cases raised. Panelists also discuss a bipartisan Senate bill targeting DeFi protocol regulation and offer observations on what 2023's developments may signal for the regulatory landscape going forward.
Daniel B. Garrie
Employment LawPanelists explain the ethical concerns that data breaches create for attorneys, then outline their responsibilities under the Model Rules of Professional Conduct, with a focus on the duty of competence, protecting client data, monitoring for breaches, and notifying current and former clients, before addressing areas where the rules remain less clearly defined.
Daniel B. Garrie
Privacy LawPanelists explain artificial intelligence, deep learning, and generative AI, covering how these tools work and where they appear in everyday business and legal contexts. They address key risks including bias, reliability, privacy, and intellectual property ownership of AI-generated content, and illustrate ethical obligations through a case of AI misuse.
Daniel B. Garrie
CISO & CTOPanelists examine how third-party vendors create cybersecurity and data protection risks for organizations, and outline practical steps—including vendor management programs and regular risk assessments—to address those risks. They also review the relevant regulatory environment and draw on a recent vendor data breach case study to illustrate key legal and operational considerations.
Daniel B. Garrie
CISO & CTOPanelists cover how cyber threats work and what attackers typically target, then walk through the 2023 SEC cybersecurity rules and the distinct challenges facing private companies. The session also examines how breaches have affected law firms through real case examples and recommends regular risk assessments, including tabletop exercises, as a practical preparedness measure.
Daniel B. Garrie
Cyber IncidentsPanelists explain the board's role in cybersecurity oversight and what that looks like in practice, including how the 2023 SEC cyber rules have expanded board responsibilities. They walk through the key elements of an effective incident response plan and the critical questions organizations should address during the planning process.
Daniel B. Garrie
CISO & CTOThis online program delivers six live, expert-led lectures across four modules—covering cybersecurity fundamentals, regulatory oversight, risk management, incident response, and board-level governance tools—designed specifically for board members. Faculty drawn from regulatory, legal, insurance, and cybersecurity backgrounds help participants understand the technical, financial, and legal risks their organization faces, and how requirements from regulators such as the SEC, FTC, NYDFS, and GDPR are shaping board responsibilities.
Daniel B. Garrie
CISO & CTOThis archive captures the 2023 beta cohort of Legal Cyber Academy's board-focused certificate program, delivered live over five weeks in September–October 2023 across six lectures organized into four modules covering cybersecurity fundamentals, regulatory oversight, risk management and incident response, and board oversight tools. The program prepared board members to understand core cybersecurity concepts, their individual responsibilities, and the regulatory landscape across SEC, FTC, NYDFS, and GDPR frameworks; core content and recordings are largely carried forward into the 2024 edition, with this beta distinguished by its live format, guest-speaker lineup, and supplemental materials.
Daniel B. Garrie
Privacy LawThis course compares how the U.S. and E.U. are approaching AI regulation, contrasting the U.S. focus on encouraging innovation with the E.U.'s risk-tiered, ethics-centered Artificial Intelligence Act, and examines what those differences mean for organizations operating across both jurisdictions. It covers foundational AI and generative AI concepts alongside an overview of each regulatory framework, helping professionals across legal, security, insurance, and executive functions understand the evolving compliance landscape.
Daniel B. Garrie