Gregory Szewczyk

Tel 303.299.7382
Fax 303.296.3956

Greg Szewczyk has nearly a decade of experience in high stakes litigation. He focuses on complex corporate and commercial litigation, First Amendment matters, and privacy and cybersecurity counseling. He has significant experience in actually trying cases before juries, judges, and arbitrators, including in cases with international implications. Greg has been recognized as a Super Lawyers Rising Star in both Colorado and New York.

In his privacy and cybersecurity practice, Greg assists clients in creating privacy and information security programs tailored to their specific needs. In doing so, Greg helps companies of all sizes ensure that they are compliant with the ever expanding patchwork of privacy and cybersecurity statutes and regulations, including the California Consumer Privacy Act. Greg also has advised clients in data breach response, including breaches impacting customers in all 50 states and in foreign countries.

He is accredited by the International Association of Privacy Professionals as a Certified Information Privacy Professional / United States (CIPP/US). In 2017, he co-authored the Colorado Privacy & Cybersecurity Handbook, a book dedicated to summarizing and explaining Colorado's evolving privacy and cybersecurity statutes, regulations, and case law and providing attorneys, privacy officers, lawmakers, and decision-makers with a single reference to the many different sources that make up Colorado privacy and cybersecurity law.

Prior to joining Ballard Spahr, Greg was an associate at Simpson Thacher & Bartlett LLP in New York. During law school, Greg served a legal internship with the U.S. Army Judge Advocate General Corps.

Representative Litigation Matters

  • Represented the brother-in-law of the King of Jordan in a three-week jury trial involving defense contracts for the transportation of oil to U.S. troops in Iraq, ultimately securing a $28.8 million jury verdict
  • Represented a major U.S. satellite-television distributor in a breach of contract action against a programming provider, ultimately securing a multimillion-dollar jury verdict in federal court
  • Represented an oil company in an action for fraudulent misappropriation of a majority interest in a Russian oil field
  • Represented a real estate asset and property management company in a two-week jury trial involving numerous contractual and tort-based claims, ultimately securing a multimillion-dollar jury verdict
  • Defended a national department store in federal and state actions relating to threatened exercise of eminent domain, including securing a temporary restraining order and preliminary injunction in the federal action which ultimately led to a favorable settlement
  • Defended a national law firm in a variety of malpractice claims, including through trial
  • Defended a global financial firm in residential mortgage-backed securities cases in multiple jurisdictions
  • Defended against antitrust class action challenges to title insurance practices in numerous jurisdictions, including successfully defeating appeals in several Circuit Courts of Appeal
  • Defended an international chemical company in a variety of lawsuits, including securing dismissal at the pleading stage of an employment lawsuit alleging millions of dollars in damages
  • Advised a closely held Dominican corporation in the luxury resort and private airport business on matters involving corporate control and stock sales
  • Advised a corporate real estate company on emergency liability issues, ultimately resulting in a favorable deal with state regulatory agencies

Representative Cybersecurity Matters

  • Conducted internal due diligence review of multiple companies, analyzing all aspects of privacy and cybersecurity programs and compliance
  • Assisted clients of various sizes in assessing and developing their privacy and cybersecurity programs, including privacy policies, third-party vendor management policies, information security plans, and incident response plans
  • Assisted clients in performing internal trainings for employees across substantive fields, including executive decision-makers and information technology teams
  • Assisted in the forensic investigation of multiple cybersecurity incidents, including incidents involving email phishing scams targeting company employees; theft of information by former employees; lost or stolen storage devices; unlawful or unauthorized access of third-party databases; inadvertent disclosure of information to vendors unauthorized to receive the information; and ransomware attacks
  • Advised numerous clients in responding to data breaches, including breaches implicating notification obligations under the laws of all 50 states and foreign countries

Recognition & Accomplishments

Super Lawyers (Rising Stars), 2014-2019

Certified Information Privacy Professional/United States 


Co-author, "What Is the Potential Liability for Zoombombing, and How Safe Are Zoom Alternatives?,Cybersecurity Law Report, April 29, 2020

Co-author, "Utah Privacy Law Would Be First to Require Search Warrant for Government to Access Stored Data," The National Law Review, March 28, 2019

Co-author, "No Actual Damages Required to Sue Under Illinois Biometric Information Privacy Law," Ballard Spahr alert, January 28, 2019

Co-author, "Analyzing the California Consumer Privacy Act's Private Right of Action," Ballard Spahr alert, November 19, 2018 

Co-author, "What Companies Need to Know About Changes to Colorado's Cybersecurity Law," ColoradoBiz Magazine, September 16, 2018

Co-author, "California Passes Legislation Significantly Changing Privacy Requirements for Entities Doing Business in the State," Ballard Spahr alert, June 29, 2018

Co-author, "California Voters Likely to Consider Enacting GDPR-Like Privacy Law in November," Ballard Spahr alert, June 5, 2018

Co-author, "Colorado Enacts Groundbreaking Privacy and Cybersecurity Legislation," Ballard Spahr alert, May 30, 2018

Co-author, "Update on Colorado's Proposed Privacy and Cybersecurity Legislation," Pratt's Privacy & Cybersecurity Law Report, May 2018

Co-author, "Oregon, New York, Alabama, and Rhode Island Join List of States Considering Data Breach Legislation Post-Equifax," Pratt's Privacy & Cybersecurity Law Report, May 2018 

Co-author, "Arizona Strengthens and Expands Data Breach Notification Law," Ballard Spahr alert, April 17, 2018

Co-author, "What Arizona Companies Need to Know About Arizona Cybersecurity Law," Ballard Spahr alert, March 21, 2018

Co-author, "What New Mexico Companies Need to Know to Respond to a Data Breach," February 21, 2018 

Co-author, "What New Mexico Companies Need to Know About the State's Cybersecurity Law," February 13, 2018 

Co-author, "Colorado Legislature Considers Sweeping Privacy and Cybersecurity Legislation," Ballard Spahr alert, January 22, 2018

Co-author, "How To Comply with the Colorado Division of Securities Cybersecurity Rules," January 17, 2018

Co-author, "Arizona Legislature Considers Strengthening Data Breach Notification Law," Ballard Spahr alert, January 16, 2018

Co-author, "What Colorado Companies Need to Know to Respond to a Data Breach," January 12, 2018 

Co-author, "Washington A.G. Sues Uber in First Enforcement Action Under Revised Data Breach Law," Ballard Spahr alert, November 29, 2017

Co-author, "Colorado Privacy & Cybersecurity Handbook," September 25, 2017 

Co-author, "Eighth Circuit Issues Two Class Action Data Breach Rulings," Ballard Spahr alert, September 1, 2017  

Co-author, "Uber Settles FTC Dispute Over Consumer Data Privacy and Security Allegations," Ballard Spahr alert, August 18, 2017 

Co-author, "Maryland Amends Data Breach Notification Law," Ballard Spahr alert, August 3, 2017  

Co-author, "Colorado District Court Dismisses Data Breach Class Action Against Noodles & Company," Ballard Spahr alert, July 26, 2017 

Co-author, "Colorado Division of Securities Publishes Final Cybersecurity Rules," Ballard Spahr alert, May 23, 2017

Co-author, "SEC Emphasizes Cybersecurity Preparedness in Wake of Global Ransomware Attack," Ballard Spahr alert, May 18, 2017

Co-author, "Colorado Proposes Cybersecurity Rules for Investment Advisers, Broker-Dealers," Ballard Spahr alert, April 26, 2017 

Co-author, "New Mexico Becomes 48th State to Enact Data Breach Notification Law," Ballard Spahr alert, April 19, 2017

Co-author, "Overview of the Association of Corporate Counsel Model Information Protection and Security Controls for Outside Counsel Possessing Company Confidential Information," Ballard Spahr memo, April 2017  

Co-author, "Eighth Circuit Remands Proposed Settlement in Target Data Breach Class Action," Ballard Spahr alert, February 2, 2017 

Co-author, "IRS and Others Renew Warnings About Fraudulent Emails Targeting Employee Tax Information," Ballard Spahr alert, January 30, 2017

Co-author, "Colorado Supreme Court Limits Jurisdiction Over Manufacturers," Ballard Spahr alert, September 20, 2016

Co-author, "Fending Off and Fighting Cybercriminals," Law Week Colorado, September 12, 2016

"Plaintiffs Cannot Bring Data Breach Lawsuits Without Evidence That Information Will Be Used To Harm," Ballard Spahr alert, August 17, 2016

"Colorado Law Protects Student Information, Boosts Cybersecurity Resource," Ballard Spahr alert, June 13, 2016

Speaking Engagements

Speaker, "The California Consumer Privacy Act: What Comes Next?", Ballard Spahr webinar, March 20, 2019

Speaker, "The End of the 'See No Evil' Approach to Vendor Management," Colorado Cybersecurity Summit, Denver, September 2018

Speaker, "Inside the Laboratory: State Legislation Impacting Privacy and Data Security," Consumer Data Industry Association Teleseminar, August 8, 2018

Speaker, "Understanding The California Consumer Privacy Protection Act of 2018," Ballard Spahr webinar, July 20, 2018

Speaker, "Colorado's Breach Law," IMA Financial Group Webinar, July 19, 2018

Panelist, "Alternative and Biometric Data," State Government Affairs and Legal Issues Forum, American Financial Services Association, June 7, 2018

Speaker, "Colorado Enacts Groundbreaking Privacy and Cybersecurity Legislation," Ballard Spahr webinar, June 4, 2018

"Business Ramifications of Proposed State and Federal Cybersecurity Legislation," Rocky Mountain Information Security Conference, Denver, May 10, 2018

"Cybersecurity: Emerging Threats and Responses," Colorado Cybersecurity Summit, Denver, October 5, 2017

Data Breach Litigation: Case Law Update," Webinar, March 1, 2017

"Cybersecurity Seminar – Best Practices for Preparing for and Responding to Data Breaches," Ballard Spahr seminar, Denver, April 7, 2016

Professional Activities

American Bar Association

Colorado Bar Association

Denver Bar Association

New York City Bar Association, Military Affairs and Justice Committee

Board Memberships

Protect Our Winters, Advisory Board

Harvard Law School (J.D. 2009)

University of Notre Dame (B.A., cum laude, 2006)


New York

U.S. District Court for the District of Colorado

U.S. District Court for the Eastern District of New York

U.S. District Court for the Southern District of New York

U.S. Court of Appeals for the Tenth Circuit