Lynette Arce


Office: Chicago, IL

Email me


Lynette Arce focuses her practice on matters of privacy, cybersecurity, and incident response. She advises clients across multiple industries on a wide range of privacy and cybersecurity compliance issues, and assists clients in developing comprehensive and practical solutions related to compliance and minimizing risk. Lynette services clients of all sizes, ranging from Fortune 100 companies to small startups, and from various industries.

Lynette is a practical problem solver with a steel reserve in moments of crisis. She has vast experience advising multinational, highly regulated clients in responding to information security incidents. She manages all aspects of a data breach response and investigation, including directing privileged forensic investigation, managing vendor relationships, developing response strategies, assessing risks and impact stemming from the incident, and advising clients on legal obligations and remediation plan.

In addition, Lynette advises clients with their cybersecurity preparedness. She crafts cybersecurity regulatory compliance documentation, such as incident response plans and written information security program policies, and advises on cybersecurity governance. She also assists clients with comprehensive privacy and cybersecurity gap and risk assessments.

Lynette regularly counsels clients on compliance with privacy and cybersecurity laws and standards, including advising clients on compliance with HIPAA, DFARS, CCPA, NYDFS, PCI DSS, and multiple state privacy and cybersecurity laws, as well as international laws including the EU’s GDPR, Canada’s PIPEDA, and many international breach notification requirements. Lynette is a Certified Information Privacy Professional/United States (CIPP/US) by the International Association of Privacy Professionals (IAPP).

Prior to joining ZwillGen, Lynette was an associate in the Global Privacy and Cybersecurity Group at McDermott Will & Emery LLP.



Loyola University School of Law, J.D., 2013

University of Vermont, B.A., 2009


McDermott Will & Emery

Greenberg Traurig


International Association of Privacy Professionals (IAPP), Certified Information Privacy Professional (CIPP/US)