Rob Yang

Rob Yang is a member of the Constangy Cyber Team and is based in the San Francisco office. 

Rob defends businesses in privacy litigation, technology errors and omissions matters, and data breach class actions. Rob represents companies facing claims under the California Invasion of Privacy Act (CIPA) and the federal Wiretap Act involving pixels, chatbots, session replay, and call-recording technologies; data breach class actions arising from data incidents, including cases coordinated across jurisdictions through joint defense groups; and litigation under the CCPA, Fair Credit Reporting Act (FCRA) and New Jersey's Daniel's Law. Rob also has substantial experience counseling clients on risk mitigation measures pertaining to these and other data privacy and security regulations, including the Illinois Biometric Information Privacy Act (BIPA) and the Telephone Consumer Protection Act (TCPA). Rob manages matters from the initial demand through resolution and often leads the teams handling them, working directly with clients on exposure assessment and defense strategy. Earlier in his career he advised cyber insurers on coverage, and that experience informs how he works with carriers today.

His practice also encompasses emerging legal and regulatory issues involving artificial intelligence, including the privacy, cybersecurity, and data governance considerations associated with the adoption and use of AI-powered technologies such as conversation-analytic tools. He advises clients on assessing and mitigating risks as the legal landscape surrounding AI continues to evolve.

Honors & Recognition

• The Best Lawyers in America^® "Ones to Watch": Labor and Employment Law - Management (2024-2027) and Litigation - Labor and Employment (2026-2027)
• California Super Lawyers® "Rising Stars" (2021-2026)
• CALI Award and LAWRAW Award for LW&R (from Santa Clara Law, Spring 2014)
• Achievement Medal for Civilian Service (USACE, 2013)
• Career Service Recognition for Civilian Employees (USACE, 2013)

About Me

Outside of work, Rob enjoys trying to lower his golf handicap. He is also an avid fitness enthusiast and MMA fan.

Representative Matters

• Defends companies in multiple CIPA mass arbitrations involving numerous claimants, including arbitrability and claimant-standing challenges, administrator fee and batching issues, and global resolution strategy.
• Serves as day-to-day lead on a portfolio of tech E&O claims against a technology provider and its business customers following a security incident affecting its platform.
• Defends companies in data breach class actions arising from data incidents, including coordinating the defense of related cases across multiple jurisdictions through joint defense groups.
• Defends companies against individual and class CIPA and Wiretap Act matters involving website tracking technologies such as pixels, chatbots, and session replay, many resolved by dismissal or walkaway.
• Defends companies against claims under New Jersey's Daniel's Law.
• Obtained dismissal of an FCRA class action against a pet food manufacturer on a motion for judgment on the pleadings, arguing that Plaintiff lacked standing to maintain an FCRA claim in California state court. Assisted in the successful defense of the appeal of said dismissal. Navarro v. Schell & Kampeter, Inc., No. C098432, 2024 Cal. App. Unpub. LEXIS 1895 (Mar. 26, 2024).
• Spearheaded response to PHI breach involving a spear phishing attack against a medical provider that resulted in the disclosure of employee data. Assessed data security problem, coordinated with relevant vendors to facilitate forensic investigations, drafted breach notification letters to employees, prepared reports to HHS and the California Attorneys’ General Office.

Education

University of California, Hastings College of the Law

• J.D., 2016

University of California, Santa Cruz

• B.A. in Business Management Economics, 2009

University of California, Berkeley

• B.S. in Civil Engineering, 2009

News

Legal Analysis

Professional

Certifications

• Certified Information Privacy Professional (CIPP) for United States law (US) through the International Association of Privacy Professionals (IAPP)