John is the Vice-Practice Group Leader for the Data, Digital Assets & Technology practice group at FBT Gibbons, helping clients effectively manage data and the corresponding risks and responsibilities throughout the information life cycle. For nearly 20 years, clients have relied on John to provide practical, actionable advice and solutions for a broad range of data privacy and security issues, including all aspects of federal, state, local and international legal and operational compliance; incident readiness, response, investigation and notification; AI implementation, governance and contracting; data processing, data transfer, and other third-party agreements; regulatory inquiries and enforcement; privacy and security assessments; and litigation and alternative dispute resolution (ADR) proceedings. In addition, John assists clients with cyber insurance coverage, policies, and endorsements; best practices to mitigate cyber risks and exposures; due diligence for regulatory compliance; and data security training for employees. John is a frequent speaker and author on data privacy and security topics and AI governance and implementation.
John also has extensive experience representing clients on insurance coverage matters. He has been included on the Best Lawyers® list for Insurance law, including its “Lawyers of the Year” list (Newark, NJ), as well as the New Jersey Super Lawyers list for Insurance Law. He has litigated matters involving hundreds of millions of dollars in insurance coverage for a broad range of clients and regularly provides strategic counseling and analysis of potential risks and exposures, policy terms and conditions, and claims resolution.
Fordham University School of Law, J.D.
Boston College, Carroll School of Management, B.S., cum laude
Law clerk to the Honorable Nicholas H. Politan, United States District Court for the District of New Jersey
United States District Court for the District of New Jersey
United States District Court for the Southern District of New York
United States Court of Appeals for the Third Circuit
Court of Appeals for the Federal Circuit
Supreme Court of the United States
Recognized by Best Lawyers®, 2026-2027 Editions: Commercial Litigation; Insurance Law
Recognized by Best Lawyers®:“Lawyer of the Year,” Insurance in Newark, NJ (2014 Edition)
Included on the New Jersey Super Lawyers list, Insurance Coverage, 2006-2007, 2013-2018, 2020-2025
Included on the Martindale-Hubbell AV® Peer Review Rated List
International Association of Privacy Professionals; Certified Information Privacy Professional/United States (CIPP/US)
Future of Privacy Forum (FPF)
Essex County Bar Association
New Jersey State Bar Association
Association of the Federal Bar of New Jersey
American Bar Association
New Jersey Business and Industry Association
William J. Brennan, Jr. Inn of Court Trial Program
District V-A Ethics Committee
Elder, Presbyterian Church at New Providence
New Providence Board of Education
New Providence Downtown Alliance
United Way of Summit and New Providence
Moderator/Speaker, New Jersey State Bar Association Annual Mid-Year Meeting, “Law Firm Cybersecurity Update,” Sorrento, Italy, October 13, 2025
Speaker, ”Understanding the New Jersey Data Privacy Act: Key Provisions and Compliance Strategies,” July 24, 2025
Speaker, “Understanding the New Jersey Data Privacy Act: Key Provisions and Compliance Strategies” July 24, 2025
Speaker, “Essential AI Update for New Jersey Attorneys: The State of Justice in a World of Evolving Technology,” May 15, 2025
Speaker, Seton Hall Law School, Certificate Program Offering a Deep Dive into Global Privacy Laws, Compliance Strategies & Case Studies, “Domain III: Understanding How to Govern AI Development,” March 13, 2025
Speaker, Association of Corporate Counsel, “Essential Considerations to Enhance Incident Response Activities,” February 4, 2025
Speaker, New Jersey State Bar Association Corporate Counsel Insitute, “Global Shifts: Strategic Approaches to Geopolitical Risk Management,” January 15, 2025
Speaker, New Jersey Institute for Continuing Legal Education, “A.I. and the Law: A 2024 Review and a Look at the Year Ahead,” December 17, 2024
Speaker, New Jersey Institute of Continuing Legal Education, “Data Privacy and Security in NJ – What You Need to Know,” October 10, 2024
Speaker, Gibbons P.C. Client CLE Day, “My Company Has a Data Breach! Now What Do We Do?” September 24, 2024
Moderator, ACG New Jersey, “The New Jersey Data Protection Act of 2024: What you need to know,” July 18, 2024
Speaker, New Jersey State Bar Association Annual Meeting & Convention, “Data Privacy and Security in New Jersey: What You Need to Know,” May 15, 2024
Speaker, Gibbons Academy, “The New Jersey Data Privacy Act: What you (and your clients) need to know,” April 23, 2024
Moderator, ACG New Jersey, Data Privacy and Security Leaders Roundtable, March 23, 2023
Speaker, Gibbons Academy, “Current Developments in Cybersecurity and Data Privacy,” February 16, 2023
Moderator, Garden State Bar Association, “Cryptocurrency and Blockchain Technology Forum,” November 9, 2022
Moderator, ACG New Jersey, “Data Privacy and Security Leaders Roundtable,” October 20, 2022
Speaker, Seton Hall Law School Gaming Law, Compliance, and Integrity Bootcamp, “Privacy and Cybersecurity,” May 18, 2022
Speaker, New Jersey Institute for Continuing Legal Education Webcast, “Insurance Law Bootcamp,” November 18, 2021
Moderator, Essex County Bar Association’s 3rd Annual Corporate Counsel Symposium, “Maintaining (and even enhancing) Data Privacy & Security in an Ever-Changing World,” October 14, 2021
Speaker, Seton Hall Law – Gaming Compliance and Integrity Program Bootcamp, “Intellectual Property Concerns, Privacy and Cybersecurity,” September 22, 2021
Speaker, New Jersey Institute for Continuing Legal Education Webcast, “Insurance Law Summer Institute,” August 4, 2021 – August 5, 2021
Speaker, American Bar Association Webinar, “Privacy vs. Discovery: GDPR, the Electronic Information Storage Act & Other Issues,” May 26, 2021
Speaker, The Garden State Bar Association Webinar, “Cybersecurity and Data Privacy Forum – Spotlight on Leadership and Diversity,” March 15, 2021
Speaker, 2020 New Jersey State Bar Association Cybersecurity & Data Policy Summit Webinar, “Practical Strategies to Prepare for the Impending Cybersecurity and Data Privacy Crisis,” December 1, 2020
Speaker, New Jersey Institute for Continuing Legal Education Webcast, “2020 Privacy Law Update: The Latest on Privacy, Cyber Insurance, and the New Jersey RPCs,” June 8, 2020
Speaker, Gibbons Financial Restructuring & Creditors’ Rights Group’s Webinar, “The Coronavirus Pandemic: A Discussion of Issues for Distressed Businesses and Creditors,” May 14, 2020
Speaker, Association for Corporate Growth, “Learn How to Keep Your Company’s Data Safe and Protect Its Valuation,” Kenilworth, NJ, January 21, 2020
Speaker, New Jersey Institute for Continuing Legal Education Webinar, “Building a Cyber Fortress around Your Town: What Every Local Government Lawyer Should Know about Cyber Security,” December 16, 2019
Speaker, Gibbons Academy, “Cybersecurity: Recent Developments in Data Breach Litigation and Cyber-Insurance Law,” Newark, NJ, November 22, 2019
Speaker, NJBIA Webinar, “Cyber Insurance: Potential Liabilities and Current Trends,” November 6, 2019
Speaker, NJICLE’s 2019 Summer CLEfest, “FootPrints in the Digital Sand: The Cutting Edge of E-Discovery: A Review of the Latest Developments & What They Mean for Litigators & In-House Counsel,” Atlantic City, NJ, August 9, 2019
Speaker, New Jersey Institute for Continuing Legal Education, “Insurance Coverage Boot Camp: Cyber Insurance,” New Brunswick, NJ, July 31, 2019
Speaker, Gibbons Privacy & Data Security Forum, “Complicating Compliance: An Inside Look at the Impact of Legislative Developments in Privacy and Security on New Jersey Businesses,” Newark, NJ, June 12, 2019
Speaker, Gibbons Academy, “Security Awareness & Compliance Training,” Newark, NJ, May 17, May 20, May 21, and May 22, 2019
Speaker, Garden State Bar Association’s Substantive Law Series, “Hot Topics in Cybersecurity & Data Privacy,” Newark, NJ, March 21, 2019
Speaker, NJBIZ, “Cyber Security: A Panel Discussion,” Somerset, NJ, February 26, 2019
Speaker, Corporate Counsel Institute sponsored by the New Jersey State Bar Association, “Understanding New Tech for Corporate and Business Lawyers,” New Brunswick, NJ, January 31, 2019
Speaker, Gibbons Academy, “Legislative Developments in Privacy and Security that Will Affect Your Clients’ Business,” Newark, NJ, January 24, 2019
Speaker, Gibbons Data Privacy & Cybersecurity Forum, “Mitigating Enterprise Risk: Expectations in Regulating Data Privacy and Security,” Newark, NJ, June 14, 2018
Rutgers University School of Management and Labor Relations, “Health Care and the Law, May 23 and May 24, 2018
Speaker, New Jersey State Bar Association Annual Conference, “IC in AC: Insurance Coverage in Atlantic City,” Atlantic City, NJ, May 17, 2018
Speaker, Gibbons Seventh Annual Employment & Labor Law Conference, “Data Privacy and Security: Hiring to Firing,” West Orange, NJ, March 13, 2018
Speaker, RIMS Cyberisk Forum, “Legislating Risk Management: The NY Department of Financial Services Cybersecurity Requirements,” Las Vegas, NV, September 8, 2017
Speaker, Lawline.com Webinar, “Data Privacy and Cybersecurity: Current Trends and Future Issues,” August 28, 2017
Speaker, NJICLE 2nd Annual Cybersecurity Law Conference: Safeguarding Against Cyberweapons of Mass Disruption, “Insurance: Protecting Against The Risk For Your Practice and Clients,” New Brunswick, NJ, June 12, 2017
Speaker, Gibbons Data Privacy & Cybersecurity Forum, “A Practical Approach to Cybersecurity,” Newark, NJ, June 9, 2017
Speaker, Gibbons Academy, “Arc of a Data Breach – Preparedness, Response, and Exposure,” Newark, NJ, April 12, 2017
Speaker, New Jersey Institute for Continuing Legal Education, “Hot Buttons in Insurance Law: 2017 – Developments in Cyber Coverage,” New Brunswick, NJJanuary 14, 2017
Speaker, New Jersey Institute for Continuing Legal Education, “2016 Cyber Security Conference,” Fairfield, NJ, December 12, 2016
Speaker, Lawline.com Webinar, “Cyber Security Breaches: Risk Mitigation, Litigation, and Insurance Coverage,” New York, NY, August 18, 2016
Speaker, Clear Law Institute Webinar, “Data Breach Insurance Coverage: Policies, Claims, and Coverage,” June 21, 2016
Speaker, New Jersey State Bar Association 2016 Cyber Security Conference, “Insurance: Protecting Against The Risk,” New Brunswick, NJ, June 14, 2016
Speaker, Gibbons Cyber Incident Preparation and Response Conference, “Mitigating Cyber Risks,” Newark, NJ, May 5, 2016
Speaker, New Jersey Institute for Continuing Legal Education, “Hot Buttons in Insurance Law: 2016 – Issues in Cyber Liability,” New Brunswick, NJ,January 16, 2016
Speaker, RIMS New Jersey Chapter, “Unusual Claims and Lessons Learned,” Basking Ridge, NJJ, January 12, 2016
Speaker, New Jersey Corporate Counsel Association, 13th Annual Conference, “Am I Covered for This? Employer Practice Liability Insurance,” Whippany, NJSeptember 18, 2015
Speaker, Gibbons Employment Academy Webinar, “Trends in the Employment Practices Liability Insurance Marketplace,” August 13, 2015
Speaker, Gibbons Employment Academy Webinar, “Trends in the Employment Practices Liability Insurance Marketplace,” August 13, 2015
Speaker, Lawline.com Webinar, “Ethical Issues and the Tripartite Relationship,” New York, NY, May 27, 2015
Speaker, Lawline.com Webinar, “Cyber Risk Insurance: Policies, Claims, and Coverage,” New York, NY, May 15, 2015
Speaker, Gibbons P.C., “The Fourth Annual Employment & Labor Law Conference: Employment Practices Liability Insurance – Am I Covered for This?” Florham Park, NJ, February 27, 2015
Forum Leader, Seton Hall University School of Law, “The Emerging Cyber Risk Insurance Market,” Newark, NJ, June 6, 2012
Speaker, Gibbons Academy, “Fundamentals of Insurance Coverage,” Newark, NJ, October 12, 2011
Guest Speaker and Forum Leader, Newark Regional Business Partnership, “Business Continuity for All Occasions: Simple Ways to Take Action,” Newark, NJ, May 9, 2006
Staying Ahead of the Curve: Understanding and Adapting use of Biometrics in the Wake of the Federal Trade Commission’s GuidanceBloomberg Law – Copyright 2025 Bloomberg Industry Group, Inc. (800-372-1033) Reproduced with permission. · October 21, 2025
New Jersey: The Date Protection Act – here’s what you need to knowOneTrust DataGuidance · May 7, 2025
Massachusetts Supreme Court Takes a Closer Look at Wiretap Laws, Potentially Narrowing Privacy ActionsPratt’s Privacy & Cybersecurity Law Report · May 2025
Privacy & Cybersecurity Law Report, A.S. Pratt Publication · April 29, 2025
Massachusetts Supreme Court Takes a Closer Look at Wiretap Laws, Potentially Narrowing Privacy Actions, Gibbons Law Alert · November 25, 2024
A Matter of Consent: How to Safely Mine Customer Data for AI ModelsThe Financial Brand · September 24, 2024
New Jersey: The Data Protection Act – here’s what you need to knowOneTrust DataGuidance · March 7, 2024
New Jersey’s Consumer Data Privacy Statute – What You Need to KnowGibbons Client Alert · January 30, 2024
A Comparative Approach to the Data Privacy Legislation in New JerseyNew Jersey Law Journal · November 29, 2023
That’s a Super-Sized Sack of Sliders: Illinois Supreme Court Finds White Castle Could Face up to $17 Billion in DamagesBusiness Law Today · May 15, 2023
GoodRx Fined $1.5 Million for Disclosure of Users’ Personal Information to Third Parties Without Notice or Consent, Gibbons Law Alert · February 23, 2023
The Shifting Sands of Data Privacy Legislation: Preparing New Jersey Businesses for What Is To Come, New Jersey Law Journal · November 28, 2022
One Size Does Not Fit All When Facing Biometric Consent Requirements, New Jersey Law Journal · December 1, 2021
Colorado Is the Latest State to Enact a Data Privacy Law: Here’s What You Need to Know, Gibbons Law Alert · August 9, 2021
Ethical Obligations and the Use of Electronic Devices, New Jersey Law Journal · November 30, 2020
Does the SHIELD Act Cover Your Business and Are You Ready?, Gibbons Law Alert · March 26, 2020
Insurance Coverage in the Age of COVID-19, Gibbons Law Alert · March 17, 2020
Human Vulnerability Identified as Weak Link in CyberattacksNJBIZ · February 25, 2020
Cover Up, or Come Clean? How to Design an Appropriate Post-Attack ResponseNJBIZ · February 24, 2020
New Data Privacy and Security Laws Will Impose Strict Mandates on Businesses, New Jersey Law Journal · December 2, 2019
U.S. Cybersecurity Laws – What German Companies Doing Business in the United States Should KnowGerman Practice Alert · November 7, 2019
U.S. Cybersecurity Laws – Was deutsche Unternehmen, die in den USA geschäftlich tätig sind, wissen solltenGerman Practice Alert · November 7, 2019
Cyberspace: Protecting Data is Serious, Business Commerce · July 2019
Protecting Patient Data: Cyber breaches at health care companies can expose more than credit card numbersNJBIZ · June 17, 2019
CCPA Amendments Expand Private Right of Action and AG’s Enforcement Power, Gibbons Law Alert · March 15, 2019
Legislating Cybersecurity: 2018 Adds Patches to the Quilt of Data Privacy Law Across the US, New Jersey Law Journal · December 3, 2018
Eleventh Circuit Rules FTC’s Data Security Cease and Desist Order Against Lab, MD Is Unenforceable, Gibbons Law Alert · June 20, 2018
The Biometric Standards: How New York Measures Up in the Face of Biometric Use RegulationsNew York Law Journal · June 4, 2018
New Jersey Poised to Mandate Across-the-Board Information and Data Security Preparedness, Gibbons Law Alert · December 7, 2017
Storm of Cyberattacks Could Spur Beefed-Up Cybersecurity Laws, Return on Information – New Jersey · November 6, 2017
Proper Planning Means You Do Not Need to Shed Tears When Hit with the Likes of WannaCry, Gibbons Law Alert · May 17, 2017
The Risks and Liability of Governing Board Members to Address Cyber Security Risks in Higher EducationJournal of College and University Law · February 28, 2017
NY Updates Cybersecurity Requirements for Financial Services Companies, Gibbons Law Alert · January 9, 2017
11th Circuit’s Stay Suggests that the FTC’s Final Order Against LabMD May Itself be “Unfair” and “Unreasonable”, Gibbons Law Alert · November 16, 2016
Believe It or Not: Computer Fraud Coverage May Not Cover Fraud Involving a Computer, Gibbons Law Alert · November 14, 2016
Regulations Proposed by NY Department of Financial Services are a Significant Development for Regulated Entities … and Everyone Else, Gibbons Law Alert · October 6, 2016
The FTC Confirms That Mere Disclosure of Health Information is a “Substantial Injury” Justifying Sanctions for “Unreasonable” Data Security Practices, Gibbons Law Alert · September 27, 2016
Fourth Circuit Confirms that Data Breach Claims are Covered Under Traditional CGL Policies, Gibbons Law Alert · May 5, 2016
Attention Corporate Policyholders: Comply With All the Notice Requirements of Your Insurance Policies When Reporting a Claim or Risk Losing All Available Coverage, Gibbons Law Alert · April 25, 2016
Don’t Get Hacked By Your Cyber-Insurer, Gibbons Law Alert · July 13, 2015
On The Effective Mitigation of Organizational Cyber Risks, Association of Corporate Counsel New Jersey (NJCCA) Chapter · September 4, 2014
Managing Risk With Effective Contract Provisions, The Metropolitan Corporate Counsel · May 2014
New York Court of Appeals Reconsiders and Holds That an Insurer May Invoke Policy Exclusions Despite Wrongful Refusal to Defend, Gibbons Law Alert · April 11, 2014
Q&A With Gibbons’ John WolakLaw360 · March 13, 2013
Broader Coverage May Still Be No Coverage At All: The First Department’s Application of the Prior Pending Claim Exclusion, Gibbons Law Alert · October 23, 2012
Lack of Actual Notice Does Not Defeat Policy Exclusion When Insurer Made Sufficient Efforts to Provide Clear and Direct Notice of New Exclusion to Policyholder, Gibbons Law Alert · October 15, 2012
New York Appeals Court Allows Grouping of Claims to Avoid Individual Deductibles, Gibbons Law Alert · July 18, 2012
Standing Matters: Marshall v. Raritan Valley Disposal Law360 · July 10, 2009
Directors and Officers Liability Insurance and Subprime Mortgage Crisis Related Litigation, The Metropolitan Corporate Counsel · May 2008
September 29, 2026 | Publications
Manufacturing is under attack. For several consecutive years, manufacturing has held an unwelcome di...
September 28, 2026 | Publications
What often begins with something that appears routine — a locked account, an unavailable system, a...
October 26, 2026 | Events
May 6, 2026 | Publications
By enacting Senate Bill (SB) 546, Oklahoma has become the 20th state to adopt comprehensive consumer...
October 21, 2025 | Publications
Use of biometric data has become an integral part of everyday life: It unlocks your phone with fac...
May 7, 2025 | Publications
The New Jersey Data Protection Act (NJDPA), effective January 15, 2025, imposes obligations on contr...
May 1, 2025 | Publications
In this article, the authors review a recent decision by the highest court in Massachusetts addressi...
November 25, 2024 | General Litigation
The Massachusetts Supreme Judicial Court recently issued an important ruling in Vita v. New England ...
January 31, 2024 | General Litigation
On January 16, 2024, Governor Murphy signed S332 into law, making New Jersey the 13th state to enact...
February 23, 2023 | E-Commerce
On February 1, 2023, the Federal Trade Commission (FTC) filed a “first of its kind” enforcement ...