John Gray is of counsel in the firm’s Litigation Practice Group. With more than a decade of experience in Arizona, California, and other forums across the nation, John has handled a wide range of cases and litigated hundreds of matters to final resolution, including numerous class actions, various complex commercial cases, and bet-the-company disputes. In those matters, John has represented clients in a number of industry sectors, including financial services, tech, retail, manufacturing, national defense, energy, construction, tourism, entertainment, health care, education, and government. John’s practice, however, focuses on the four areas detailed below: cybersecurity and data privacy; labor and employment disputes; financial services and insurance disputes; and government investigations.
Cybersecurity and Data Privacy
John’s primary area of focus is cybersecurity and data privacy. In this field, John represents clients in cybersecurity and data privacy investigations and litigation matters, including data breach class actions. He also advises clients on compliance with the California Consumer Privacy Act (CCPA), the EU’s General Data Protection Regulation (GDPR), and various other laws and regulations pertaining to data privacy and protection.
Before joining the firm, John worked in the Consumer Protection and Advocacy Section of the Arizona Attorney General’s Office, where he served as senior litigation counsel, fintech sandbox counsel, and data privacy team leader. As data privacy team leader, John was responsible for dozens of data privacy investigations and litigation matters, many of which involved millions of data subjects and tens or hundreds of millions of dollars at issue. He also drafted significant portions of Arizona’s updated data breach notification law and new virtual coin offering law in 2018, and he led a group of more than 80 lawyers from more than 25 states and territories in the training and certification process to become Certified Information Privacy Professionals with the International Association of Privacy Professionals.
As a Certified Information Privacy Professional and a member of the Sedona Conference Working Group on Data Security and Privacy Liability, John has spoken and written extensively about privacy and security issues. In 2019, he also served as co-chair of the Technology Futures Subgroup of the Arizona Cybersecurity Team, where he worked with commercial, academic, government, and community leaders to assess cybersecurity threats and opportunities associated with new and emerging technologies.
Labor and Employment Disputes
John represents employers in various industries and has defended clients against claims relating to the federal Fair Labor Standards Act (FLSA), overtime, meal breaks, rest breaks, wage statements, waiting time penalties, discrimination, retaliation, harassment, eavesdropping, wrongful termination, off-the-clock work, rounding, alternative workweeks, and the California Private Attorney General Act (PAGA). Having begun his legal career with an international law firm in Los Angeles, John also has extensive experience litigating employment matters in California state and federal courts, including both putative class actions and individual matters.
In addition, John has advised clients regarding employee handbooks, potential terminations, and severance agreements; he has litigated trade-secret, confidentiality, and non-compete claims involving former employees; he has obtained temporary restraining orders against threatening former employees; he has litigated matters before the California Labor Commissioner; and he has handled internal investigations under Title VII and the California Fair Employment and Housing Act.
Financial Services and Insurance Disputes
John represents financial institutions, insurance companies, and related parties in a variety of litigation and arbitration matters. In particular, he has extensive experience defending broker-dealers and investment advisors in arbitrations before the Financial Industry Regulatory Authority (FINRA), and he has successfully moved to compel such arbitration in multiple matters originally filed in state or federal courts. In addition, John has represented financial services and insurance clients in securities class actions, bankruptcy matters, probate and garnishment actions, actions to enforce judgments, and cases alleging fraudulent lending practices and/or wrongful foreclosure.
As former senior litigation counsel with the Arizona Attorney General’s Office, John has significant experience in government investigations relating to alleged consumer fraud or unfair, deceptive, and abusive acts and practices (UDAP) claims. At the Arizona Attorney General’s Office, John led one of the largest multistate consumer fraud investigations in recent years, and he served on several other executive committees for multistate investigations involving hundreds of millions or billions of dollars at issue. He is therefore well-positioned to defend clients who may be under investigation by state or federal authorities, and he has a keen understanding of both the procedural and substantive issues involved in such matters.
More About John C. Gray, CIPP/US
- J.D., University of Southern California, Gould School of Law, 2009
- B.S., magna cum laude, Arizona State University, 2006
- Arizona, 2011
- California, 2009
- U.S. District Court, District of Arizona
- U.S. District Court, Central District of California
- U.S. District Court, Eastern District of California
- U.S. District Court, Northern District of California
- U.S. District Court, Southern District of California
- U.S. Court of Appeals, Ninth Circuit
- International Association of Privacy Professionals
- Sedona Conference, Working Group 11
- Currently representing Fortune 500 health care company as local counsel in multiple putative class actions regarding alleged data breaches.
- Handling several nationwide cybersecurity incident response matters in connection with ransomware events and other attacks against vendors.
- Representing group of underwriters as local counsel in securities class actions filed in both state and federal court.
- Defending state agency against constitutional claims seeking to invalidate agency’s enforcement statute.
- Representing multiple Fortune 500 companies in confidential state attorney general investigations.
- Obtained order vacating multimillion-dollar arbitration award fraudulently issued against national hotel organization.
- Led 32-state consumer protection investigation against global tech company involving hundreds of millions of dollars at issue.
- Recovered millions of dollars for State of Arizona and residents in consumer protection and data privacy investigations and litigation.
- Drafted Arizona data breach notification law and virtual coin offering law.
- Represented financial advisor in FINRA arbitration and related litigation brought by former NFL athlete, resulting in dismissal of all claims against client in both actions.
- Obtained favorable settlement for Fortune 50 retailer in purported consumer fraud class action after plaintiff’s first amended complaint was dismissed.
- Obtained favorable settlement on eve of trial for auto parts manufacturer in bet-the-company litigation brought by former private equity investors.
- Represented mortgage trustee in series of cases alleging “wrongful foreclosure”; obtained dismissal on the pleadings in more than a dozen cases, with others settled for less than nuisance value.
Honors & Recognitions
- At the Arizona Attorney General's Office, John was recognized as the 2019 Civil Litigation Division Emerging Star.
- While in law school, John was selected as a first year summer fellow and as a legal research, writing, and advocacy fellow.
- Prior to law school, John graduated from the Barrett Honors College at Arizona State University, where he was recognized as the Finance Department's Outstanding Graduating Senior and was elected the inaugural president of the Undergraduate Investment Management Fund.
- Phoenix Business Journal, 06/23/2021
- San Fernando Valley Business Journal, 04/12/2021
- Law360, 01/17/2020,
- Lewis Roca Blog, 12/16/2021
- Lewis Roca Blog, 12/22/2020,
- Lewis Roca Blog, 12/15/2020,
- Lewis Roca Blog, 12/11/2020,
- Lewis Roca Blog, 06/25/2020
- Lewis Roca Blog, 04/1/2020
- Lewis Roca Blog, 01/21/2020
- Speaker, “Legal Update,” CISO Executive Network Virtual Roundtable, September 2021
- Co-presenter, "The Threat Within: Addressing and Limiting Legal Risks Posed by Internal Cybersecurity and Data Privacy Vulnerabilities,” CLE Presentation, Lewis Roca Rothgerber Christie LLP, July 2021
- Speaker, “Legal Update,” CISO Executive Network Virtual Roundtable, May 2021
- Co-presenter, "Responding to Ransomware: Ethical Considerations and Implications,” CLE Presentation, Lewis Roca Rothgerber Christie LLP, April 2021
- Co-moderator, “Cyber Legal Roundtable,” Lewis Roca Rothgerber Christie LLP, January 2021
- Co-presenter, “The Ethics of Ransomware Payments,” CLE Presentation, Lewis Roca Rothgerber Christie LLP, December 2020
- Speaker, “CPRA Highlights,” CISO Executive Network Virtual Roundtable, December 2020
- Co-presenter, "2020 Ethics in Cybersecurity Virtual Event - Rule of Law," University of Colorado, Colorado Springs, November 2020
- Speaker, “Legal Update,” CISO Executive Network Virtual Roundtable, October 2020
- Speaker, “GDPR: Data Protection Officers,” CISO Executive Network Virtual Roundtable, April 2020
- Speaker, "USPQ Seminar - CCPA and Privacy by Design," CLE Presentation, Lewis Roca Rothgerber Christie LLP, February 2020
- Speaker, "CCPA and Privacy by Design," CISO Executive Network Breakfast Roundtable, December 2019
- Panelist, “The Impact of Emerging Legislation and Regulations on Practitioners’ Security/Privacy Considerations and Operations,” 2019 Cybersecurity Lunch Forum, Arizona Technology Council, December 2019
- Panelist, “How are regulators looking at protecting consumers in this new era?” Symantec CalPrivacyCon, March 2019
- Panelist, "Bridging the Expertise Gap between Technologists and State AGs," 2019 AGTech Forum, Berkman Klein Center for Internet and Society at Harvard University, February 2019
- Speaker, "HB2154, Arizona’s New Data Breach Notification Law," CLE Presentation, Office of the Arizona Attorney General, August 2018
- Virtual, 09/21/2021
- via Zoom, 04/27/2021
- Litigation and Disputes
- Class Actions
- Data Protection and Cybersecurity
- eDiscovery and Data Management
- Labor and Employment
- Insurance Services
- Alternative Dispute Resolution
- Business Torts and Partnership Disputes
- Investigations and White Collar Criminal Defense
- Securities Litigation and Enforcement
- Securities Litigation Broker Dealers
- Webinar |  06/28/2022
- Blog |  12/16/2021
- Webinar |  09/21/2021