About Scott

Scott Warren is a partner in our Tokyo and Shanghai offices and leads a team specializing in cybersecurity, data privacy, artificial intelligence (AI) implementation and governance, digital compliance, eDiscovery and cross-border data matters throughout Japan, China and the broader Asia-Pacific region.

He advises multinational and domestic organizations on AI implementation, connected vehicles, cybersecurity, data governance, digital investigations, eDiscovery and complex privacy and transfer compliance matters. Scott also has extensive experience in corporate compliance, intellectual property, litigation, dispute resolution and regulatory and internal investigations. He has advised multinational corporations across the technology, software, retail, healthcare, pharmaceutical, automotive, banking, trading, telecommunications and professional services sectors.

Scott began his legal career as a civil litigator in California and has experience in all phases of dispute resolution, from pleadings through jury trials. After relocating to Japan in 1993, he authored the Japan Employers Handbook for CCH, a leading international publisher. As general counsel of Sega Corporation, he managed a broad range of corporate and intellectual property matters, including licensing and anticounterfeiting actions against infringers worldwide. He also oversaw internal and regulatory investigations involving EU competition law, US International Trade Commission proceedings and product safety reporting matters.

As a senior attorney at Microsoft, Scott was responsible for the Xbox launch across Japan, Korea, Hong Kong, Taiwan and Singapore. He served as worldwide head of anti-piracy for Xbox and led anti-piracy initiatives for all Microsoft products in North Asia. He also served as Microsoft’s North Asia head of Internet Safety, working closely with governments and law enforcement agencies to combat cybercrime, promote online safety and address the legal aspects of cybersecurity incidents and data breaches. Through this work, he became involved with The Society for the Policing of Cyberspace, a nonprofit organization dedicated to creating a safer digital environment, where he serves as its president.

Scott later served as managing director of Kroll in Japan and regional managing director of Kroll Ontrack in Asia, where he led investigative, computer forensics and eDiscovery services throughout the region. He subsequently established Epiq Systems' operations in Japan, building a team and service platform that provided eDiscovery solutions to multinational organizations. Many of these engagements involved intellectual property, antitrust, bribery, securities and other regulatory matters.

Having spent more than 13 years as in-house counsel and in building two successful legal services businesses in Asia, Scott brings a practical, commercially focused and globally informed perspective to complex cybersecurity, privacy, compliance, investigations and cross-border business challenges. He is a Certified International Counter-Cyber Crime Professional and a member of the Chartered Institute of Arbitrators (CIArb).

Credentials

Education
  • Southwestern University School of Law, J.D., 1987
  • University of Denver, B.A., 1984
Admissions
  • Japan – Foreign Lawyer qualification, 2017
  • California, 1987
Courts
  • U.S. Ct. of App., Ninth Circuit, 1987

Recognitions

  • Recognized in 2026 Top 500 Global Leading Cyber Lawyers by Lawdragon Publications

  • Recognized as the Data Privacy Lawyer of the Year in Japan in 2020-2023 and 2025-2026 by Global Law Experts and Corporate Intl Magazine Global Awards, and in 2020-2021 by Leaders in Law Global Awards

  • Recognized as the Cybersecurity and Digital Compliance Lawyer of the Year in Japan in 2020-2023 by Global Law Experts and Corporate Intl Magazine Global Awards

  • Recognized as the Cybersecurity Law Firm of the Year in Japan in 2020-2023 and 2025-2026 by Global Law Experts and Corporate Intl Magazine Global Awards

  • Named in Best Lawyers in Japan for Intellectual Property in 2021-23

  • Named the Cybersecurity & Data Privacy Lawyer of the Year in Japan by Lawyer Network Annual Awards for 2021 and 2022

  • Named the Leader of the Year by American Chamber of Commerce in Japan in 2020

  • Recommended in Legal 500 Asia Pacific 2018 in Corporate and M&A – International firms and joint ventures, Japan, Dispute resolution – International firms and joint ventures, Japan and Intellectual property – International firms and joint ventures, Japan

Publications & Speaking Engagements

Speaking Engagements (since 2024)

  • Speaker, “Cross-Border Data Transfers in Arbitral and Legal Proceedings”, 12th International Arbitration & Corporate Crime Summit, Seoul, August 26, 2026.

  • Speaker, “Cybersecurity Governance in the AI Era”, 2026 International Conference on Cybercrime and Digital Forensics, Jeju, South Korea, May 15, 2026.

  • Speaker/Moderator, “Legal Developments and Challenges in the Use of AI and New Technology in the Detection, Investigation and Prosecution of Cybercriminals”, POLCYB Quarterly Conference, Vancouver, Canada, May 1, 2026.

  • Speaker/Chair, “US EO14117 Update & Effective Handling of a Cross-Border Data Breach: Challenges in Regulatory Investigations”, 20th China International Compliance Summit, Shanghai, April 22, 2026.

  • Speaker, “Singapore Personal Data Protection Act, Cross-Border Risk & Accountability” and “How Legal Leaders Decide During Investigations, Disputes & Incidents”, Global Legal ConfEx, Singapore, February 26, 2026.

  • Speaker, “Cross-Border Data Transfers in Arbitral and Legal Proceedings”, Thailand & SE Asia: 7th International Arbitration Summit, Bangkok, February 25, 2026.

  • Speaker, “Managing Cross-Border Data Breaches: What You Need To Know”, AmCham Shanghai, January 29, 2026.

  • Speaker, “Cross-Border Data Transfers: How It Impacts Your Litigation or Arbitration”, Thailand & SE Asia 7th International Arbitration Summit, Bangkok, January 24, 2026.

  • Speaker/Chair, “Data Sovereignty: How US Data Transfer Restrictions to China Affect Your Business”, 17th International China Compliance Summit, Shanghai, October 28, 2025.

  • Speaker, “US Data Transfer Restrictions to China: How Executive Order 14117 and Implementing Regulations Affect Your Business”, AmCham Shanghai, September 18, 2025.

  • Speaker, “Cross-Border Data Breach: Protecting Your Company from Armageddon”, 5th International Arbitration, Corporate Fraud & Anti-Trust Summit, Hong Kong, August 21, 2025.

  • Speaker, “AI Regulation and Implementation”, 11th International Arbitration, Corporate Crime Summit, Seoul, July 23, 2025.

  • Speaker, “AI Regulation and Implementation”, IAPP Singapore 2025 Conference, Singapore, July 10, 2025.

  • Speaker, “US Data Transfer Restrictions to China: How Executive Order 14117 and Implementing Regulations (Data Security Program) Affect Your Business”, China 8th International Arbitration, Corporate Fraud & Anti-Trust Summit, Shanghai, June 25, 2025.

  • Speaker, “Effective Handling of a Cross-Border Breach”, Global Legal ConfEx, Singapore, February 18, 2025.

  • Speaker/Chair, “Data Sovereignty: How It Impacts The Cross-Border Flow of Data”, 17th China International Anti-Corruption Compliance Summit, Dubai, January 15-16, 2025.

  • Speaker, “Cross-Border Data Breach: What You Need To Know”, Corporate Compliance and Arbitration Summit, Jakarta, December 12, 2024.

  • Speaker, “Cross-Border Data Breach: What You Need To Know”, Corporate Compliance and Arbitration Summit, Ho Chi Minh, October 30, 2024.

  • Speaker/Chair, “Data Sovereignty: How It Impacts The Cross-Border Flow of Data”, 15th China International Anti-Corruption Compliance Summit, Beijing, October 25, 2024.

  • Speaker, “Cross-Border Data Breach: What You Need To Know”, Corporate Compliance and Arbitration Summit, Seoul, September 26, 2024.

  • Speaker/Chair, “Everything, Everywhere, All the Time: How Digital Data Regulations Affect Everything from Cross-Border Investigations, Disputes, Data Breach Response and AI”, Thailand & SE Asia: 5th International Arbitration & Corporate Crime Summit, March 14, 2024.

  • Speaker/Moderator, “Breach Notification: A Deep Dive into What, When and Who to Notify” and “Strategies For Managing Risks and Ensuring Compliance with Anti-Bribery and Anti-Corruption Measures”, GRC, Data Privacy & Cyber Security Conference, February 20, 2024.

Publications

  • Author, “US bulk data transfer rule and related class action lawsuits”, Squire Patton Boggs Client Alert, May 11, 2026.