Search form

Jason C. Gavejian


P 973-538-6890
F 973-540-9015


Jason C. Gavejian is a Principal in the Morristown, New Jersey, office of Jackson Lewis P.C. and a Certified Information Privacy Professional (CIPP/US) with the International Association of Privacy Professionals.

As a Certified Information Privacy Professional (CIPP/US), Mr. Gavejian focuses on the matrix of laws governing privacy, security, and management of data. Mr. Gavejian is Co-Editor of, and a regular contributor to, the Firm’s Privacy Blog.

Mr. Gavejian's work in the area of privacy, data security, and e-communications includes counseling international, national and regional companies on the vast array of privacy and security mandates, preventive measures, policies, procedures, and best practices. This includes, but is not limited to, the privacy and security requirements under both state and federal law (e,g, GLBA, HIPAA/HITECH, FTC Act, ECPA, SCA, etc.). He has helped companies in all industries to assess information risk and security as part of the development and implementation of comprehensive data security safeguards including written information security programs (WISP). Additionally, Mr. Gavejian has assisted companies in developing and implementing social media, electronic signature (ESIGN), monitoring, bring your own device (BYOD), and company owned personally enabled device (COPE) programs, including policies and procedures to address same. Further, he regularly advises clients on compliance issues under the Telephone Consumer Protection Act (TCPA) and has represented clients in suits, including class actions, brought in various jurisdictions throughout the country under the TCPA.

Mr. Gavejian also represents companies with respect to inquiries from the HHS/OCR, state attorneys general, and other agencies alleging wrongful disclosure of personal/protected information. He negotiates vendor agreements and other data privacy and security agreements, including business associated agreements. Further, his work in the area of workplace privacy includes helping clients through the process of investigating and responding to breaches of the personally identifiable information (PII) they maintain about consumers, customers, employees, patients, and others, while also assisting clients in implementing policies, practices, and procedures to prevent future data incidents.

Moreover, Mr. Gavejian represents management exclusively in all aspects of employment litigation, including restrictive covenants, class-actions, harassment, retaliation, discrimination and wage and hour claims in both federal and state courts. Mr. Gavejian regularly appears before administrative agencies, including the Equal Employment Opportunity Commission, the Office for Civil Rights (OCR), the New Jersey Division of Civil Rights, and the New Jersey Department of Labor. His practice also focuses on advice/counseling employers regarding daily workplace issues.

Mr. Gavejian’s litigation experience, coupled with his privacy practice, provides him with a unique view of many workplace issues and the impact privacy, data security, and social media may play in actual or threatened lawsuits.

Mr. Gavejian regularly provides training to both executives and employees and regularly speaks on current privacy, data security, monitoring, BYOD, social media, TCPA, and information management issues. His views on these topics have been discussed in multiple publications, including the National Law Review, Bloomberg BNA,, @Law Magazine, Risk and Insurance Magazine, LXBN TV, Business Insurance Magazine, and

Mr. Gavejian serves on the National Leadership Committee of the Hispanic National Bar Association and regularly volunteers his time for pro bono matters. 

Prior to joining Jackson Lewis, Mr. Gavejian served as a judicial law clerk for the Honorable Richard J. Donohue on the Superior Court of New Jersey, Bergen County.

Honors and Recognitions

Professional Associations and Activities

  • American Bar Association
  • CIPP, International Association of Privacy Professionals
  • Hispanic National Bar Association, National Leadership Team – CLE Committee Co-Chair

Pro Bono and Community Involvement

  • Pro Bono Partnership, Program Co-coordinator, HR Bootcamp for NJ Nonprofits (2011, 2013, 2015)
  • Pro Bono Partnership, Volunteer

Published Works

  • “Social Media Use by Applicants and Employees:  The Conundrum”; Copyright & New Media Law, Spring 2016. 

Speeches and Presentations

  • Cyber Security & Privacy Law Conference, New Jersey State Bar Association – NJICLE (September 2016) (Presenter/Panelist)
  • Don’t Say That! Defending High Profile Cases and Managing the Media, Hispanic National Bar Association (September 2016) (Moderator/Panelist)
  • Data Privacy/Security & Social Media in the Workplace, New Jersey Association of Corporate Counsel (NJACC) (May 2016)(Presenter)
  • Employee Use of Technology – The Good, The Bad, and The Ugly, Hispanic National Bar Association (March 2016) (Moderator/Panelist)
  • “Privacy and Data Security Today,” HoRenso HR Steering Committee (June 17, 2015) (presenter)
  • “Handling A Data Breach," PeDS Group Nationwide Webinar Series (March 26, 2015) (panelist and presenter)
  • “Top 15 Data Privacy and Security Issues for 2015,”  New Jersey Association of Corporate Counsel (March 24, 2015) (panelist and presenter)
  • “HR Boot Camp for New Jersey Nonprofits,”  Pro Bono Partnership (October 21, 2015, September 16, 2015, May 14, 2013, April 16, 2013) (panelist and presenter)
  • “Employees Left to Their Own Devices: New Devices, New Technologies, and What Lies Ahead,” Connecticut Business and Industry Association (August 4, 2014) (presenter)
  • “Data Breach,” Jersey Shore Association of Human Resources  (May 8, 2014) (presenter)
  • “Bring Your Own Device to Work (BYOD) Risky Business???,” Commerce and Industry Association of New Jersey (March 18, 2014) (panelist and presenter)
  • “Data Privacy Training,” Society of Human Resource Management (February 19, 2014) (presenter)
  • “Data Breach Response," Association of Corporate Counsel – Legal Quick Hit Webinar (February 4, 2014) (presenter)

See AllJason C. Gavejian in the News

Showing 1-3 of 10
Most Read
February 21, 2017
Jackson Lewis

Jason C. Gavejian Honored with 2017 Top Lawyers Under 40 Award

February 21, 2017

MORRISTOWN, NJ (February 21, 2017) Jackson Lewis P.C., one of the country’s preeminent workplace law firms, is pleased to announce Morristown Principal Jason C. Gavejian has been selected to receive the prestigious “HNBA Top Lawyers Under 40” Award. The award, which is presented by the Hispanic National Bar Association... Read More

October 20, 2016
The ChannelPro Network

Jason Gavejian Comments on 'Reasonable' Steps in Securing Data

October 20, 2016

Jason Gavejian comments on securing electronic data and workplace privacy in "What Defines ‘Reasonable’ Security Measures?", published by The ChannelPro Network. Subscription may be required to view article Read More

August 24, 2016
Bloomberg BNA

Jason Gavejian Comments on Privacy Concerns over Pokemon Go

August 24, 2016

Jason Gavejian comments on privacy concerns over Pokémon Go in "Pokémon GO Violates European Privacy Laws: EU Lawmaker," published in Bloomberg BNA. Subscription may be required to view article Read More

Showing 1-3 of 10

See AllPublications

Advanced Filtering
Showing 1-3 of 11
Most Read
January 30, 2017

Top 10 for Data Privacy Day 2017

January 30, 2017

In honor of Data Privacy Day, we provide the following “Top 10 for 2017,” a list of critical areas in data privacy that businesses should know about. While not exhaustive, the list points out hot topics on data privacy and security for organizations to consider in 2017. 1. Phishing Attacks and Ransomware Phishing, as... Read More

November 7, 2016

Getting Prepared for the New York Department of Financial Services’ Proposed Cybersecurity Regulations

November 7, 2016

Taking aim at the growing threat posed by cyber-attacks to the financial services industry, the New York State Department of Financial Services (“DFS”) has proposed a first-of-its kind, far-reaching, rigorous cybersecurity framework that could become the national standard. DFS is accepting comments on these proposed rules... Read More

August 17, 2016

EU-U.S. Privacy Shield Q&A

August 17, 2016

The European Union and U.S. officials have given final approval of the EU-U.S. Privacy Shield, which replaces the Safe Harbor invalidated by the Court of Justice of the European Union in October 2015. Like it predecessor, the Privacy Shield will allow organizations based in the United States to self-certify compliance with... Read More

Showing 1-3 of 11

See All Webinars


Watch Now

Handling A Data Breach

March 26, 2015 - 1:00 PM to 2:00 PM
Watch Now

See AllBlog Posts by Jason C. Gavejian

Top 10 for 2017 – Happy Data Privacy Day
January 27, 2017

In honor of Data Privacy Day, we provide the following “Top 10 for 2017.”  While the list is by no means exhaustive, it does provide some hot topics for organizations to consider in 2017. 1. Read More

DoD Updates Cyber Incident Reporting Rule
October 12, 2016

On October 4, 2016, a final rule implementing statutory requirements for Department of Defense (DoD) contractors and subcontractors to report cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or covered defense information residing therein, or on a contractor’s ability Read More

VOTE 2016 – The Only Easy Choice
October 5, 2016

In an election year that has divided much of the country, we are providing you with a clear and simple choice this voting cycle.  To this end, we are proud to announce that the Workplace Privacy Report Has Been Nominated for The Expert Institute’s Best Legal Blog Competition. Read More