1. Home
  2. People
  3. Harlow, Rebecca

Rebecca Harlow

Partner

San Francisco

Rebecca is a class action litigator who focuses on the collection, handling and loss of data, including cybersecurity and privacy litigation.

Rebecca’s practice includes all aspects of class action and other civil litigation in areas including privacy and data security breach litigation as well as insurance litigation. She has represented multiple companies in class action litigation involving claims by consumers, employees, and institutions relating to security, privacy and other issues. She has defended litigation arising out of data breaches involving claims by consumers and financial institutions and class actions bringing wiretapping and other claims against companies relating to the use of online technologies and tools like cookies, pixels and session replay software. She also advises companies on risk mitigation measures in an effort to avoid such claims ever being filed.

Rebecca has assisted multiple clients across several industries in seeking, obtaining, and disputing the denial of insurance coverage. Throughout the COVID-19 pandemic, she advised clients on insurance, contracting, and other unique issues that arose. Rebecca’s pro bono practice focuses on immigration and civil rights issues.

Prior to joining Orrick, Rebecca was a litigation associate in the San Francisco office of another international law firm. She previously served as a pro bono fellow at Greater Boston Legal Services representing low-income clients in disputes over state cash and food assistance benefits.

  • Data Breach Class Action Defense

    • MOVEit Breaches. Defending CalPERS, Johns Hopkins University, TIAA, and Performance Health Technology Ltd. in class action litigation arising from hackers’ attack on the MOVEit file transfer platform.
    • See Tickets. Represented See Tickets in class actions arising out of two data security incidents on the event ticketing platform.
    • University of Minnesota. Defending class action litigation relating to alleged theft of personal information from University databases.
    • Zoosk. Defended Zoosk and its parent company against a consumer class action in federal court in California following the announcement of a data security incident.
    • Arby’s. Advised Arby’s regarding the defense against all third-party claims arising from a payment card incident.
    • Target. Advised Target Corporation in defending card issuer class action litigation stemming from the data security breach announced by Target.

    Privacy Class Action Defense

    • Financial Institutions. Representing multiple financial institutions defending against state wiretapping claims relating to third-party tools on websites.
    • Planned Parenthood. Defending Planned Parenthood Federation of America against website-related privacy claims.
    • Carnival. Represented Carnival in litigating state wiretapping claims arising out of the use of session replay technology on the company’s website.
    •  Jornaya. Defended Jornaya in three class action lawsuits involving wiretapping claims regarding Jornaya’s TCPA Guardian and LeadiD products.
    • Caesars. Defended Caesars in a class action brought under the Video Privacy Protection Act (VPPA) involving online games on Caesars New Jersey gaming website.
    • Pampered Chef. Represented Pampered Chef in the resolution of VPPA claims.

    Other Litigation Experience

    • Global semiconductor manufacturing company. Participated in a fraud trial on behalf of a global semiconductor manufacturing company. The matter was tried in-person during the height of the Omicron variant in early 2022 and settled after a week of trial.
    • Getaround.  Handled a professional negligence and breach of contract lawsuit against the client's former third-party auto insurance administrator.

Insights