Overview
John is a member of the Constangy Cyber Team and is based in Atlanta, Georgia. As a member of the compliance advisory team, he advises companies on complex privacy, cybersecurity, and artificial intelligence governance issues, helping organizations navigate rapidly evolving regulatory requirements while aligning compliance programs with business and technical operations.
John brings more than a decade of experience counseling multinational organizations and highly regulated financial institutions on global privacy and information security compliance. His practice focuses on data protection frameworks, cybersecurity incident response, privacy program governance, AI risk management, and regulatory compliance. He regularly advises clients on compliance with major international and domestic privacy regimes, including the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), the General Data Protection Regulation (GDPR), and other global data protection laws.
Before joining Constangy, John served as Lead Counsel for Data Privacy & Security at Intercontinental Exchange (ICE), the parent company of the New York Stock Exchange. In that role, he directed global privacy and AI governance programs across the enterprise and its subsidiaries, working closely with engineering, security, and executive leadership teams to operationalize privacy-by-design principles and enterprise cybersecurity controls. He chaired the company’s Privacy Steering Committee, reported directly to the General Counsel on global risk posture, and led the legal response to cybersecurity incidents across the organization.
John also has significant experience negotiating and drafting data protection and information security provisions in complex commercial and technology agreements, conducting data privacy impact assessments, and advising on cross-border data transfers and emerging AI governance requirements. Earlier in his career, he held senior information security roles supporting federal defense and government technology programs, giving him a unique perspective at the intersection of law, cybersecurity operations, and national security systems.
In addition to his legal practice, John previously served as an Adjunct Professor at Emory University School of Law, where he taught a capstone course on Privacy, Information Security, and AI Law.
John earned his Juris Doctor, as a Merit Scholar, from Emory University School of Law and his Bachelor of Science degree in Information Technology from the University of Massachusetts Lowell. He holds several industry-recognized cybersecurity certifications, including Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), and Federal IT Security Professional–Manager (FITSP-M).
About Me
John is a huge fan of the Atlanta Braves and the Notre Dame Fighting Irish. Outside of the office, he can be found in the gym or on the golf course.
Credentials
Education
Emory University School of Law
- J.D., 2018
University of Massachusetts Lowell
- B.S., Information Technology, 2015
Media
News
Professional & Civic Associations
Professional
- ISC(2), 2010 – present
- ISACA, 2011 – present
Services
Industries
Admissions
- Alabama, 2021
"Excellence is never an accident. It is always the result of high intention, sincere effort, and intelligent execution."
Aristotle
