Representing a coalition of Fortune 500 companies, Jim has helped to draft more than two hundred US state privacy, data security, security breach notification laws and consumer protection laws.  He has also helped to draft many of the United States' Internet privacy laws, including the Children's Online Privacy Protection Act, CAN-SPAM Act of 2003, the USA Patriot Act of 2001, the Digital Millennium Copyright Act and Communications Decency Act.

He has personally counseled clients regarding responses to more than 390 data security breaches since 2005, and advised many clients on global privacy and security requirements.

Jim has defended clients in numerous FTC investigations and enforcement actions, and has litigated major privacy cases in federal courts, including Maine Newspaper Association v. Mills, Parker v. Time Warner Cable, and Los Angeles Police Department v. United Reporting Co..