Edgar provides comprehensive advice on federal and state privacy and security laws, including broad consumer privacy statutes such as the CCPA and other emerging state frameworks, as well as compliance with federal regulations such as CAN-SPAM and HIPAA. He helps clients to develop and refine key policies such as privacy, terms of use, and information security protocols. Additionally, Edgar handles all aspects of data governance and technology agreements, including BAAs, EULAs, and statements of work governing data utilization.

Clients appreciate Edgar’s decisive guidance in responding to and mitigating security incidents, trusting his ability to help them implement effective incident response plans during critical times. He also equips organizations with robust preparedness strategies to address and minimize the impact of security breaches.

Edgar helps clients understand evolving regulatory frameworks and proactively mitigate the associated risks, including the privacy and security implications of cutting-edge technologies such as generative AI. He also supports clients with data privacy and security due diligence in connection with M&A transactions, and assists clients with the protection of their creative and innovative assets through copyrights, trademarks, and trade secrets.

Edgar is fluent in Spanish.

• Involved in helping a leading cloud software company in a large privacy breach litigation matter, requiring a deep understanding of technology, incident response, and forensics, given the technical facts.
• Serving as counsel for a Software-as-a-Service (SaaS) provider in one of the first class actions alleging CCPA violations and other privacy-based claims.
• Updated and enhanced the data processing addendums for many vendors on behalf of a global company by reviewing countless documents and establishing compliance with California’s evolving legal framework.
• Performed a security assessment on behalf of a federal regulator involving a multinational finance company.
• Analyzed online agreements relating to U.S. and international privacy and security laws and state and federal regulatory schemes involving facial recognition program for a large research organization.
• Supported a U.S.-based financial company involved in a security incident — analyzing facts of the intrusion to identify obligations across state and federal regulations, in addition to any contractual terms.

• Appointed KnowledgeNet co-chair for IAPP, Orange County Chapter (2025)
• Selected as Young Privacy Professional for the International Association of Privacy Professionals (IAPP), Orange County Chapter (2024)