Rob Hartwell

Hartwell Robert

Rob Hartwell represents clients in international and domestic legal and policy matters related to ecommerce, privacy, and cybersecurity. Rob develops data sharing and product development programs, and advises on the drafting of data use policies, compliance and training programs, and digital marketing. He counsels clients on consumer privacy matters before federal and state agencies, including the Federal Trade Commission (FTC), the Federal Communications Commission (FCC), the Department of Commerce, state attorneys general, and various other state agencies and legislatures.

Rob is actively involved in consumer privacy policy discussions for corporate and trade association clients. He has assisted with the development of self-regulatory programs for the advertising industry on Internet, advertising, consumer products and services, media, and privacy issues. Rob also advises corporate and trade association clients on digital advertising self-regulatory codes and programs, including the Digital Advertising Alliance (DAA) Principles and the Network Advertising Initiative (NAI) Code of Conduct.

On behalf of advertising and media industry trade associations, Rob prepares comments in response to federal and state legislative and rulemaking proceedings. His representation of clients before federal and state regulatory agencies also includes advocacy in administrative investigations. He advocates for clients on state and federal regulatory statutes and proposed congressional legislation. His work encompasses privacy, consumer protection, advertising, and healthcare regulations on a state, federal, and international level, including:

  • California Consumer Privacy Act (CCPA)
  • Cable Act
  • Children's Online Privacy Protection Act (COPPA)
  • Communications Act
  • Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM)
  • Digital Advertising Alliance's Self-Regulatory Principles
  • EU's General Data Protection Regulation (GDPR)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Health Information Technology for Economic and Clinical Health Act (HITECH)
  • Restore Online Shoppers' Confidence Act (ROSCA)
  • Video Privacy Protection Act (VPPA)
  • EU-U.S. and Swiss Privacy Shield
  • Network Advertising Initiative's Code of Conduct


Government Experience

  • Intern, Federal Energy Regulatory Commission, Department of Energy




  • J.D. cum laude University of Michigan Law School 2013
    • Contributing editor, Michigan Telecommunications and Technology Law Review
  • M.S.I. Information Policy University of Michigan School of Information 2013
    • Member, Phi Kappa Phi National Honors Society
  • B.A. University of Michigan 2008

Bar Admissions

  • Maryland
  • District of Columbia


  • Legal 500, Media, technology and telecoms - Cyber law (including data privacy and data protection), 2022