John Tomaszewski focuses on emerging technology and its application to business. His primary focus has been developing trust models to enable new and disruptive technologies and businesses to thrive. In the "Information Age," management needs to have good advice and counsel on how to protect the capital asset which heretofore has been left to the IT specialists — its data.

John’s experience in the understanding of a company’s data governance and protection needs provide a specialized point of view which allows for holistic solutions. A good answer should always solve at least three problems.

As leader of the Global Privacy & Security team, John has significant experience counseling companies regarding data protection and information security throughout the Americas, Europe, and Asia. His clients have included a myriad of technology companies as well as financial services, transportation, logistics, electric vehicle manufacturer, pharmaceutical, and e-commerce businesses of all sizes.

John has built and deployed compliance programs for big data analytics providers, pharmaceutical companies, financial services institutions, cloud service providers, social media companies, health care providers, semi-autonomous vehicle manufacturers, supply-chain platforms, and a host of both traditional “brick-and-mortar” and emerging technology clients. He has also advised on Artificial Intelligence, data governance models and information assurance, digital signatures, enterprise technology acquisition transactions, cybersecurity maturity model certification requirements, and other information security and confidentiality issues.

John has been a co-author of several information security and privacy publications, including "Privacy, Security and Information Management: An Overview", as well as publishing scholarly works of his own on the topic. He has also provided input to the drafting of various security and privacy laws around the world; including acting as the initial drafter and rapporteur to the APEC Cross-Border Privacy Rules system. He is a frequent speaker globally on the topics of cloud computing, supply-chain security, self-regulatory organizations, data protection, and cross-border privacy frameworks.