1701 Market St.\\Philadelphia, PA 19103-2921\\United States
Co-leader of the firm’s privacy and cybersecurity practice and retail & ecommerce sector, Gregory T. Parks counsels and defends consumer-facing clients in matters related to privacy and cybersecurity, class actions, Attorney General investigations and enforcement actions, the California Consumer Privacy Act, consumer protection laws, loyalty and gift card programs, retail operations, payment mechanisms, product liability, retail waste, shoplifting prevention, compliance, antitrust, commercial disputes, and a wide variety of other matters for retail, ecommerce, and other consumer-facing companies. Greg also handles data security incident response crisis management and any resulting litigation, and manages all phases of litigation, trial, and appeal work arising from these and other areas.
Greg’s work in the privacy space includes compliance and implementation consulting on laws like the California Consumer Protection Act (CCPA), the European General Data Protection Regulation (GDPR), the state data breach notification laws, the Fair Credit Reporting Act (FCRA), the FTC Red Flags rule, and a myriad of other global, federal, state, and local privacy laws.
With more than 20 years of experience with the unique problems and challenges facing retailers, Greg counsels these clients through consumer class actions, real estate litigation, privacy and data security concerns, product and premises liability cases, and similar issues. In 2014 and 2015, Law360 named him an MVP for retail and ecommerce. His operational and compliance counseling involves matters arising from credit cards, gift cards, employee background checks, anti–money laundering plans, advertising and sales, data collection and privacy, and loyalty, layaway, and shoplifting prevention programs.
In the aftermath of data breaches—he’s advised on more than 800 breaches in his career—Greg helps clients craft immediate responses. He counsels them on how best to give notice to affected individuals or government and consumer reporting entities, following proper compliance protocol. He also represents these companies on any class action and other litigation stemming from the incidents, and instructs them on implementing policies and procedures to prevent and mitigate future breaches.
His compliance work with more than 500 companies encompasses a range of laws, including the CCPA, GDPR, Fair and Accurate Credit Transactions Act (FACTA), the FCRA, PCI-DSS mandates for credit card security, the FTC Red Flags Rule, US federal and state CAN-SPAM laws, the Telephone Consumer Protection Act, FinCEN and other anti–money laundering rules, the Children’s Online Privacy Protection Act, Massachusetts Data Protection laws, and other US state and federal rules and regulations. Greg frequently comments in the news media, writes articles, and teaches classes on these subjects.
Winning a complete defense verdict in a rare consumer class action trial for a major national retailer under California’s gift card redemption law in which the Plaintiff class sought more than $30 million. Greg also successfully won affirmance of the verdict on appeal.
Winning a defense verdict in a 6-week jury trial of a premises liability case at a major retailer’s flagship New York store in which the Plaintiff sought $25 million.
Winning a $6.4 million jury verdict and judgment for a venture capital company that sold its interest in a number of related companies and then faced an indemnity / escrow claim from the purchaser.
Successfully managing more than 500 data breach incidents, including determining and executing notification requirements, assisting clients with investigative and remedial actions, and pursuing cost recoveries against insurers or responsible parties.
Winning complete indemnity from a supplier for a Top 10 retailer against an $80 million claim for alleged violations of the Fair Credit Reporting Act in the conduct of criminal background checks.
Winning motions to dismiss or successfully settling more than a dozen lawsuits under the Fair and Accurate Credit Transactions Act (FACTA) for information printed on credit card receipts provided by retail companies at the point of sale.
Winning favorable settlements of more than 20 consumer class actions, in which the costs of the settlement were less than 20% of the liability or costs of defense the company faced.
Winning a motion to dismiss a claim under the Fair Credit Reporting Act by successfully arguing that the source of a criminal background check was not a consumer reporting agency.
Winning complete indemnity and for three retailers accused of using illegal technologies on their ecommerce websites to track website visitors.
Winning motions to dismiss or convincing Plaintiff’s lawyers not to bring more than 10 lawsuits accusing retailers of collecting information at the point of sale in credit card transactions that is prohibited by state law.
Winning a successful settlement of allegations of systemic pricing inaccuracy by a major retailer across the state of California.
Winning a $3.6 million judgment in favor of a retailer against a shopping center landlord who failed to carry out various development obligations.
Winning a motion to dismiss a trademark infringement and license dispute on behalf of the holder of a world famous trademark.
Winning a motion to dismiss an $80 million claim against a Trustee in a mortgage securitization.
Winning a $25 million judgment in a bench trial arising from acquisition of sub-prime mortgage assets.
Awards and Affiliations
Recommended, Media, technology and telecoms: Cyber law (including data privacy and data protection), The Legal 500 US (2019)
Law360 Retail and eCommerceMVP (2014–2015)
Member, American Bar Association
Member, Philadelphia Bar Association
Member, International Association of Privacy Professionals
Fellow, Temple University's Academy of Advocacy
Listed, "Lawyers on the Fast Track," The Legal Intelligencer and Pennsylvania Law Weekly (2009)
Listed, "2006 Rising Star Super Lawyer" by Pennsylvania Law & Politics Magazine
Recommended, Dispute resolution: General commercial disputes; Recommended, Media, technology and telecoms: Cyber law (including data privacy and data protection); The Legal 500 US (2018)
US Court of Appeals for the Second Circuit
US Court of Appeals for the Third Circuit
US Court of Appeals for the Ninth Circuit
US District Court for the Eastern District of Pennsylvania
US District Court for the Middle District of Pennsylvania
US District Court for the Western District of Pennsylvania
US District Court for the Northern District of Illinois
US District Court for the Central District of Illinois
US District Court for the Eastern District of Wisconsin
University of Pennsylvania Law School, 1997, J.D., cum laude