Eric Shinabarger

Eric is a corporate associate whose practice focuses on privacy counseling, data breach response, and regulatory compliance. As a key member of Winston’s Regulated Personal Information (RPI) practice, Eric assists clients to create privacy and data security compliance programs from scratch as well as improving on existing practices. Eric’s experience includes counseling clients on compliance with BIPA, GDPR, HIPAA, CCPA, CPRA, Red Flags Rule, CAN-SPAM, FCRA, GLBA, TCPA, and both state and federal unfair, deceptive, and abusive acts and practices laws. He is a member of the firm's Videogame, Gaming and Esports Group dedicated to providing comprehensive legal solutions to companies in these industries. Eric also devotes much of his practice to incident response and preparation, including preparing for and preventing data breaches and assisting clients evaluate and respond to threatened or actual security incidents.

Eric also regularly advises on privacy and data security matters associated with mergers, acquisitions, investments, and other significant corporate transactions. This includes handling post-closing remediation issues that implicate privacy and security and advising portfolio companies on an ongoing basis. This also includes working with clients to negotiate large-scale commercial contracts that involve the transfer, use, or security of personal information.

Eric has also represented clients in responding to regulatory investigations brought by state and federal regulators including state attorneys general and the FTC, CFTC, SEC, OCR, and PCAOB. He has worked on appeals in both federal and state courts, drafted and argued dispositive motions, and conducted internal investigations. Eric recently succeeded in overturning a pro bono client’s public housing eviction before an Illinois appellate court and in obtaining a grant of asylum for a pro bono client before an immigration court.