Search form

Jason C. Gavejian


P 973-538-6890
F 973-540-9015



Jason C. Gavejian is a Principal in the Morristown, New Jersey, office of Jackson Lewis P.C. and a Certified Information Privacy Professional (CIPP/US) with the International Association of Privacy Professionals.

Mr. Gavejian represents management exclusively in all aspects of employment litigation, including restrictive covenants, class-actions, harassment, retaliation, discrimination and wage and hour claims in both federal and state courts. Additionally, Mr. Gavejian regularly appears before administrative agencies, including the Equal Employment Opportunity Commission, the Office for Civil Rights (OCR), the New Jersey Division of Civil Rights, and the New Jersey Department of Labor. His practice also focuses on advice/counseling employers regarding daily workplace issues.

As a Certified Information Privacy Professional (CIPP/US), Mr. Gavejian focuses on the matrix of laws governing privacy, security, and management of data. Mr. Gavejian is Co-Editor of, and a regular contributor to, the Firm’s Privacy Blog.

Mr. Gavejian's work in the area of privacy, data security, and e-communications includes counseling international, national and regional companies on the vast array of privacy and security mandates, preventive measures, policies, procedures, and best practices. This includes, but is not limited to, the privacy and security requirements under the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA). He has helped companies in all industries to assess information risk and security as part of the development and implementation of comprehensive written information security programs (WISP). Additionally, Mr. Gavejian has assisted companies in developing and implementing social media and bring your own device (BYOD) programs, including policies and procedures to address same. Further, he regularly advises clients on compliance issues under the Telephone Consumer Protection Act (TCPA) and has represented clients in suits, including class actions, brought in various jurisdictions throughout the country under the TCPA.

Mr. Gavejian also represents companies with respect to inquiries from the HHS/OCR and other agencies alleging wrongful disclosure of protected information. He negotiates vendor agreements and other data privacy and security agreements, including business associated agreements. Further, his work in the area of workplace privacy includes helping clients through the process of investigating and responding to breaches of the personally identifiable information (PII) they maintain about consumers, employees, and others, while also assisting clients in implementing policies, practices, and procedures to prevent future data incidents.

Mr. Gavejian’s litigation experience, coupled with his privacy practice, provides him with a unique view of many workplace issues and the impact privacy, data security, and social media may play in actual or threatened lawsuits.

Mr. Gavejian regularly provides training to both executives and employees and regularly speaks on current privacy, monitoring, BYOD, social media, TCPA, and information management issues. His views on these topics have been discussed in multiple publications, including, @Law Magazine, Risk and Insurance Magazine, LXBN TV, and

Prior to joining Jackson Lewis, Mr. Gavejian served as a judicial law clerk for the Honorable Richard J. Donohue on the Superior Court of New Jersey, Bergen County.

Honors and Recognitions

Professional Associations and Activities

  • American Bar Association
  • CIPP, International Association of Privacy Professionals
  • Hispanic National Bar Association

Speeches and Presentations

  • “Privacy and Data Security Today,” HoRenso HR Steering Committee (June 17, 2015) (presenter)
  • “Handling A Data Breach," PeDS Group Nationwide Webinar Series (March 26, 2015) (panelist and presenter)
  • “Top 15 Data Privacy and Security Issues for 2015,”  New Jersey Association of Corporate Counsel (March 24, 2015) (panelist and presenter)
  • “HR Boot Camp for New Jersey Nonprofits,”  Pro Bono Partnership (October 21, 2015, September 16, 2015, May 14, 2013, April 16, 2013) (panelist and presenter)
  • “Employees Left to Their Own Devices: New Devices, New Technologies, and What Lies Ahead,” Connecticut Business and Industry Association (August 4, 2014) (presenter)
  • “Data Breach,” Jersey Shore Association of Human Resources  (May 8, 2014) (presenter)
  • “Bring Your Own Device to Work (BYOD) Risky Business???,” Commerce and Industry Association of New Jersey (March 18, 2014) (panelist and presenter)
  • “Data Privacy Training,” Society of Human Resource Management (February 19, 2014) (presenter)
  • “Data Breach Response," Association of Corporate Counsel – Legal Quick Hit Webinar (February 4, 2014) (presenter)

See AllJason C. Gavejian in the News

Showing 1-3 of 9
Most Read
October 20, 2016
The ChannelPro Network

Jason Gavejian Comments on 'Reasonable' Steps in Securing Data

October 20, 2016

Jason Gavejian comments on securing electronic data and workplace privacy in "What Defines ‘Reasonable’ Security Measures?", published by The ChannelPro Network. Subscription may be required to view article Read More

August 24, 2016
Bloomberg BNA

Jason Gavejian Comments on Privacy Concerns over Pokemon Go

August 24, 2016

Jason Gavejian comments on privacy concerns over Pokémon Go in "Pokémon GO Violates European Privacy Laws: EU Lawmaker," published in Bloomberg BNA. Subscription may be required to view article Read More

July 21, 2016
Copyright & New Media Law

Jason Gavejian Authors "Social Media Use By Applicants and Employees: The Conundrum"

July 21, 2016

Jason Gavejian authored "Social Media Use By Applicants and Employees: The Conundrum," published by Copyright and New Media Law.     Read More

Showing 1-3 of 9

See AllPublications

Advanced Filtering
Showing 1-3 of 13
Most Read
August 17, 2016

EU-U.S. Privacy Shield Q&A

August 17, 2016

The European Union and U.S. officials have given final approval of the EU-U.S. Privacy Shield, which replaces the Safe Harbor invalidated by the Court of Justice of the European Union in October 2015. Like it predecessor, the Privacy Shield will allow organizations based in the United States to self-certify compliance with... Read More

August 1, 2016

Next Stop for Pokémon GO: Regulation & Litigation?

August 1, 2016

The Pokémon GO craze has taken the world by storm, with estimated downloads of the digital game topping more than 75 million since the program became available on July 6. Apple has confirmed that it was the most downloaded app ever in its first week of availability. When first offered, the game required users to grant permission not... Read More

June 9, 2016

5 Practice Tips for Law Firms as Data Breach Spotlight Swings Their Way

June 9, 2016

While data breach incidents affecting the entertainment, retail, healthcare, and financial industries have garnered more attention in past years, the data breach spotlight recently shifted to law firms. This shift was triggered by media coverage of the breach and leak of the Panama Papers, and by reports that, in 2015, hackers... Read More

Showing 1-3 of 13

See All Webinars


Watch Now

Handling A Data Breach

March 26, 2015 - 1:00 PM to 2:00 PM
Watch Now

See AllBlog Posts by Jason C. Gavejian

DoD Updates Cyber Incident Reporting Rule
October 12, 2016

On October 4, 2016, a final rule implementing statutory requirements for Department of Defense (DoD) contractors and subcontractors to report cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or covered defense information residing therein, or on a contractor’s ability Read More

VOTE 2016 – The Only Easy Choice
October 5, 2016

In an election year that has divided much of the country, we are providing you with a clear and simple choice this voting cycle.  To this end, we are proud to announce that the Workplace Privacy Report Has Been Nominated for The Expert Institute’s Best Legal Blog Competition. Read More

No Harm, No Foul (And No Class Action Lawsuit): TCPA Class Action Dismissed For Failure to Allege Harm
August 24, 2016

Earlier this month, United States District Court Judge Peter Sheridan dismissed a class action brought against Work Out World (“WOW”) under the Telephone Consumer Protection Act (TCPA).  In doing so, Judge Sheridan relied on the recent decision by the United States Supreme Court in Spokeo, Inc. v. Robins. Read More