Justin Sherman is a consultant, scholar, author, and expert witness focused on cybersecurity and data privacy, technology policy, and geopolitics.
Justin Sherman is the founder and CEO of Global Cyber Strategies, a Washington, DC-based research and advisory firm working on cybersecurity, data privacy, tech policy, supply chain, and geopolitics.
Described by NPR as “the go-to guy for all things cybersecurity, data privacy, AI,” he is also an adjunct professor at Georgetown University’s School of Foreign Service, the scholar in residence at the Electronic Privacy Information Center, and a nonresident senior fellow at the Atlantic Council. He is a contributing editor at Lawfare and writes a column for Barron’s. He is sanctioned by the Russian government for his work.
“The go-to guy for all things cybersecurity, data privacy, AI”
Justin has consulted on projects and programs for organizations ranging from HBO to DARPA. He advises startups, including privacy company DeleteMe and privacy-first mobile carrier Cape, and serves on advisory boards for the Center for Democracy & Technology (CDT) and Internet Safety Labs. He has consulted for and advised CEOs, government officials, investors, attorneys, product managers, communications strategists, and threat intelligence teams. He provides expert witness and litigation consulting services on cybersecurity and data privacy, and his work has been cited by the FTC, FCC, CFPB, DOJ, CPPA, and other agencies.
Previously, he taught at Duke University and founded and ran its research program on data brokerage. He worked at the Tech, Law, & Security Program at American University Washington College of Law, New America, and the Laboratory for Analytic Sciences, among others, and consulted for leading technology- and security-focused companies and nonprofits. He held fellowships at Georgetown Law’s Center on Privacy & Technology, Stanford’s Starling Lab for Data Integrity, Duke Law’s Center on Law & Technology, and Stanford’s US-Russia Forum, where he participated in Track II dialogues with Russian counterparts on international security issues.
Justin is the author of Navigating Technology and National Security (Wiley, 2025) and is writing multiple more books, including a book on the data broker industry forthcoming with Bloomsbury. He has written dozens of papers and hundreds of articles on topics such as cybersecurity policy, data brokerage, data privacy, internet infrastructure and geopolitics, digital supply chain risk, national security technology regulation, US-China tech policy, and Russian cyber, information, and technology strategy, policy, and operations — including for The Atlantic, The Daily Beast, Foreign Affairs, Foreign Policy, The Guardian, and The Washington Post. He previously wrote op-ed columns for Slate and WIRED.
He has testified repeatedly to Congress; spoken at the White House, the United Nations, and NATO; and briefed policymakers in the United States, Europe, and beyond. He has appeared on BBC, CNBC, CNN, Deutsche Welle, Marketplace, NPR, PBS NewsHour, and SHOWTIME’s “VICE” and been quoted in Bloomberg, The Economist, Fox News, Financial Times, Fortune, Los Angeles Times, The New York Times, Politico, Reuters, Rolling Stone, Slate, The Wall Street Journal, and The Washington Post. His work has been featured on HBO’s “Last Week Tonight with John Oliver.”
He earned his M.A. in Security Studies from Georgetown University and his B.S. in Computer Science and his B.A. in Political Science from Duke University.