Andrew Ready Tate · Founder
Your data is their business. Holding them accountable is mine.
I founded Privacy Rights Law to represent people whose personal information has been collected, tracked, shared, or used without their consent. The work requires equal fluency in the technology and the law, and it always begins with understanding what a system actually does.
Practice
I represent individuals in class actions and other litigation over the technologies that quietly observe everyday life: tracking code on websites and in apps, software development kits (SDKs) inside mobile software, connected devices in the home, and the data-broker networks behind them. Much of my recent work has involved tools such as the Meta Pixel and Google Analytics deployed on healthcare, education, and consumer platforms, and the privacy of children online.
Every matter follows the same sequence. First, I find out how the technology works: what it collects, where the information goes, and what the company told its users. Then I identify who deployed it, who profited from it, and what the law required of each of them. Then I litigate. That approach has produced legal theories now being tested against dozens of companies, and it is why the practice sits at the intersection of law and technology.
Privacy and class-action experience
Before founding Privacy Rights Law, I practiced at Peiffer Wolf Carr Kane Conway & Wise, where I originated and led numerous data privacy and data breach matters and worked alongside the firm’s senior partners on others. Beginning in 2023, my practice focused primarily on data security and privacy litigation, including complex class actions and mass arbitrations. In less than three years of class-action practice, I negotiated class settlements valued at more than $50 million.
I have litigated significant matters involving consumer privacy, data breaches, and tracking technologies deployed on websites and patient portals. That work has helped shape emerging case law on how state and federal wiretapping statutes, including the California Invasion of Privacy Act, apply to modern technologies, and how traditional tort and contract principles apply to contemporary data-security disputes.
Companies often try to escape class accountability by pointing to arbitration clauses buried in their terms of service. I have defeated numerous motions to compel arbitration, keeping those cases in court where they belong. Most of the people I represent had no reason to know that their information had been taken, let alone that they had rights over it. Steady, unblinking advocacy on their behalf has moved the law forward for all of them.
My investigations frequently involve close collaboration with data-forensics and information-technology experts to analyze network intrusions, identify tracking mechanisms, determine how information moves between parties, and assess the scope and consequences of unauthorized access or disclosure.
Representative experience
This work has produced significant results for clients while contributing to the development of privacy and data-security law.
Class Counsel in two hospital-tracking settlements
I served as Class Counsel in two settlements involving allegations that hospital systems deployed tracking technologies on hospital websites and patient portals that communicated sensitive health information. The settlements totaled approximately $17 million.
Doga v. State of Louisiana, Office of Motor Vehicles
I helped obtain a complete reversal of a trial-court decision dismissing a proposed data-breach class action arising from a breach affecting approximately six million individuals. The Louisiana First Circuit Court of Appeal reinstated the plaintiffs' claims.
Doga, No. 2024-1116, 2025 WL 1912320 (La. App. 1 Cir. July 11, 2025)
Kinlaw v. Nwaokocha
In my first jury trial, I served as first-chair trial counsel in a medical-malpractice action in the United States District Court for the Eastern District of Virginia and obtained a $1.3 million jury verdict for a client who suffered a fractured hand while incarcerated. TopVerdict recognized the verdict among the Top 100 medical-malpractice verdicts in the United States for 2019; it remains one of the largest awarded to a living plaintiff injured in a correctional facility.
No. 3:17-cv-00772 (E.D. Va.)
These matters are representative of my experience before founding Privacy Rights Law and should not be understood as results obtained by Privacy Rights Law unless otherwise indicated. Prior results depend on the facts of each matter and do not guarantee a similar outcome.
Earlier practice
Across that work I have taken more than 100 depositions, drafted more than 500 complaints, briefs, and motions, and carried cases from filing through trial and appeal as the attorney responsible for them, not as a second chair.
Before concentrating on privacy and data-security litigation, I litigated matters involving medical malpractice, excessive force, cruel and unusual punishment, coerced sterilization, due-process violations, institutional neglect at nursing homes and fertility clinics, the unlawful denial of retirement benefits to police officers and firefighters, workplace torts, and whistleblower retaliation.
In 2018, I litigated cases challenging the U.S. Government's separation of families at the U.S.–Mexico border, work that reunited numerous parents with their children.