Close

People

Phyllis B. Sumner is a Partner in King & Spalding's Atlanta office and the firm's Chief Privacy Officer. She leads the firm's Data, Privacy and Security Practice and regularly counsels corporate boards, senior executives and other clients on cybersecurity preparedness, emergency response, remediation, compliance, internal and regulatory enforcement investigations, and data breach and privacy litigation.

She is a crisis manager and trial lawyer, who works with her clients' legal, compliance and business teams to strategize, manage and defend when significant privacy and security issues arise. She has assisted clients with their response to and management of hundreds of data security incidents and has represented clients defending against class actions and regulator investigations in some of the largest and most high-profile data security incidents. 

A nationwide top ranked Privacy & Data Security lawyer by Chambers USA, Phyllis’ clients note “Her knowledge and expertise when it comes to ransomware incident response is second to none.” Phyllis is a recognized leader in the industry and consistently named to Cybersecurity Docket’s annual list of “best and brightest Incident Response attorneys,” including the 2023 and 2024 Global Incident Response Top 50. Three-time Law360 MVP, she also has earned recognition as a Daily Report’s “Distinguished Leader,” Atlanta Magazine’s "Women Making a Mark," and as one of Global Data Review’s “Women in Data,” and she is listed in the Best Lawyers of America for her high caliber work in privacy and data security law.

She served as an Assistant U.S. Attorney for eight years, first for the Northern District of Illinois and then for the Northern District of Georgia, prosecuting high-profile cases such as Eric Rudolph, the Centennial Olympic Park bomber.

Full Bio

Credentials

J.D., Vanderbilt University

B.B.A., University of Georgia

Georgia

Illinois

Supreme Court of Georgia

U.S. Court of Appeals for the Eleventh Circuit

U.S. Court of Appeals for the Ninth Circuit

U.S. District Court for the Middle District of Georgia

U.S. District Court for the Northern District of Georgia

U.S. District Court for the Northern District of Illinois

Top Ranked Lawyer, Privacy & Data Security


Chambers USA, Nationwide (2022)

"Her knowledge and expertise when it comes to ransomware incident response is second to none."


Chambers USA (2022)

Incident Response Top 30


Cybersecurity Docket (2016, 2018-2022)

She "leads a top-notch team with deep experience in the full spectrum of data privacy.. in investigations and lawsuits."


Legal 500 (2022)

Recommended, Cyber Law


Legal 500 (2022-2022)

Recommended, General Commercial Disputes


Legal 500 (2020)

Named, Women in Data


Global Data Review (2019)

Named, Distinguished Leader


Daily Report (2017)

MVP, Cybersecurity & Privacy


Law360 (2017)

MVP, Privacy


Law360 (2016)

Named, Women Making a Mark


Atlanta Magazine (2016)

Super Lawyer


Super Lawyers, Georgia (2013-2016)

MVP, Healthcare


Law360 (2014)

Director’s Award, Superior Performance in Trial of former Atlanta Mayor Bill Campbell


Executive Office for the United States Attorneys (2008)

John Marshall Award, Prosecution of Olympic Park bomber Eric Rudolph


Attorney General (2006)

Director’s Award, Prosecution of Olympic Park bomber Eric Rudolph


Bureau of Alcohol, Tobacco, Firearms and Explosives (2006)

Award, Prosecution of Olympic Park bomber Eric Rudolph


Federal Bureau of Investigation (2006)

Honorary Special Agent Award, Trial and Conviction of former Atlanta Mayor Bill Campbell


Internal Revenue Service (2006)

Director’s Award of Recognition, Trial and Conviction of a former Atlanta City Commissioner


Federal Bureau of Investigation (2003)

Honorary Special Agent Award, Trial and Conviction in a Multimillion Dollar Fraud Case


Internal Revenue Service (2003)

Close

Recognition

Top Ranked Lawyer, Privacy & Data Security


Chambers USA, Nationwide (2022)

"Her knowledge and expertise when it comes to ransomware incident response is second to none."


Chambers USA (2022)

Incident Response Top 30


Cybersecurity Docket (2016, 2018-2022)

She "leads a top-notch team with deep experience in the full spectrum of data privacy.. in investigations and lawsuits."


Legal 500 (2022)

Recommended, Cyber Law


Legal 500 (2022-2022)

Recommended, General Commercial Disputes


Legal 500 (2020)

Named, Women in Data


Global Data Review (2019)

Named, Distinguished Leader


Daily Report (2017)

MVP, Cybersecurity & Privacy


Law360 (2017)

MVP, Privacy


Law360 (2016)

Named, Women Making a Mark


Atlanta Magazine (2016)

Super Lawyer


Super Lawyers, Georgia (2013-2016)

MVP, Healthcare


Law360 (2014)

Director’s Award, Superior Performance in Trial of former Atlanta Mayor Bill Campbell


Executive Office for the United States Attorneys (2008)

John Marshall Award, Prosecution of Olympic Park bomber Eric Rudolph


Attorney General (2006)

Director’s Award, Prosecution of Olympic Park bomber Eric Rudolph


Bureau of Alcohol, Tobacco, Firearms and Explosives (2006)

Award, Prosecution of Olympic Park bomber Eric Rudolph


Federal Bureau of Investigation (2006)

Honorary Special Agent Award, Trial and Conviction of former Atlanta Mayor Bill Campbell


Internal Revenue Service (2006)

Director’s Award of Recognition, Trial and Conviction of a former Atlanta City Commissioner


Federal Bureau of Investigation (2003)

Honorary Special Agent Award, Trial and Conviction in a Multimillion Dollar Fraud Case


Internal Revenue Service (2003)

Matters

Defending Capital One in 2019 data breach.

Led defense of Equifax Inc. in 2017 data breach.

Led defense of The Home Depot in 2014 data breach consumer class action MDL.

See more

Close

Matters

Defending Capital One in 2019 data breach.

Led defense of Equifax Inc. in 2017 data breach.

Led defense of The Home Depot in 2014 data breach consumer class action MDL.

Led defense of Sears/Kmart in the 2014 data breach financial institution consolidated class actions.

Matters

Defending Capital One in 2019 data breach.

Led defense of Equifax Inc. in 2017 data breach.

Led defense of The Home Depot in 2014 data breach consumer class action MDL.

See more

Close

Matters

Defending Capital One in 2019 data breach.

Led defense of Equifax Inc. in 2017 data breach.

Led defense of The Home Depot in 2014 data breach consumer class action MDL.

Led defense of Sears/Kmart in the 2014 data breach financial institution consolidated class actions.

Credentials

J.D., Vanderbilt University

B.B.A., University of Georgia

Georgia

Illinois

Supreme Court of Georgia

U.S. Court of Appeals for the Eleventh Circuit

U.S. Court of Appeals for the Ninth Circuit

U.S. District Court for the Middle District of Georgia

U.S. District Court for the Northern District of Georgia

U.S. District Court for the Northern District of Illinois

Top Ranked Lawyer, Privacy & Data Security


Chambers USA, Nationwide (2022)

"Her knowledge and expertise when it comes to ransomware incident response is second to none."


Chambers USA (2022)

Incident Response Top 30


Cybersecurity Docket (2016, 2018-2022)

She "leads a top-notch team with deep experience in the full spectrum of data privacy.. in investigations and lawsuits."


Legal 500 (2022)

Recommended, Cyber Law


Legal 500 (2022-2022)

Recommended, General Commercial Disputes


Legal 500 (2020)

Named, Women in Data


Global Data Review (2019)

Named, Distinguished Leader


Daily Report (2017)

MVP, Cybersecurity & Privacy


Law360 (2017)

MVP, Privacy


Law360 (2016)

Named, Women Making a Mark


Atlanta Magazine (2016)

Super Lawyer


Super Lawyers, Georgia (2013-2016)

MVP, Healthcare


Law360 (2014)

Director’s Award, Superior Performance in Trial of former Atlanta Mayor Bill Campbell


Executive Office for the United States Attorneys (2008)

John Marshall Award, Prosecution of Olympic Park bomber Eric Rudolph


Attorney General (2006)

Director’s Award, Prosecution of Olympic Park bomber Eric Rudolph


Bureau of Alcohol, Tobacco, Firearms and Explosives (2006)

Award, Prosecution of Olympic Park bomber Eric Rudolph


Federal Bureau of Investigation (2006)

Honorary Special Agent Award, Trial and Conviction of former Atlanta Mayor Bill Campbell


Internal Revenue Service (2006)

Director’s Award of Recognition, Trial and Conviction of a former Atlanta City Commissioner


Federal Bureau of Investigation (2003)

Honorary Special Agent Award, Trial and Conviction in a Multimillion Dollar Fraud Case


Internal Revenue Service (2003)

Close

Recognition

Top Ranked Lawyer, Privacy & Data Security


Chambers USA, Nationwide (2022)

"Her knowledge and expertise when it comes to ransomware incident response is second to none."


Chambers USA (2022)

Incident Response Top 30


Cybersecurity Docket (2016, 2018-2022)

She "leads a top-notch team with deep experience in the full spectrum of data privacy.. in investigations and lawsuits."


Legal 500 (2022)

Recommended, Cyber Law


Legal 500 (2022-2022)

Recommended, General Commercial Disputes


Legal 500 (2020)

Named, Women in Data


Global Data Review (2019)

Named, Distinguished Leader


Daily Report (2017)

MVP, Cybersecurity & Privacy


Law360 (2017)

MVP, Privacy


Law360 (2016)

Named, Women Making a Mark


Atlanta Magazine (2016)

Super Lawyer


Super Lawyers, Georgia (2013-2016)

MVP, Healthcare


Law360 (2014)

Director’s Award, Superior Performance in Trial of former Atlanta Mayor Bill Campbell


Executive Office for the United States Attorneys (2008)

John Marshall Award, Prosecution of Olympic Park bomber Eric Rudolph


Attorney General (2006)

Director’s Award, Prosecution of Olympic Park bomber Eric Rudolph


Bureau of Alcohol, Tobacco, Firearms and Explosives (2006)

Award, Prosecution of Olympic Park bomber Eric Rudolph


Federal Bureau of Investigation (2006)

Honorary Special Agent Award, Trial and Conviction of former Atlanta Mayor Bill Campbell


Internal Revenue Service (2006)

Director’s Award of Recognition, Trial and Conviction of a former Atlanta City Commissioner


Federal Bureau of Investigation (2003)

Honorary Special Agent Award, Trial and Conviction in a Multimillion Dollar Fraud Case


Internal Revenue Service (2003)