Photo of Sadia Mirza

Sadia dedicates her practice to counseling clients on cutting-edge privacy and cybersecurity issues. Clients turn to her for pre-incident response planning and preparedness, and also call her when the first sign of a security incident/data breach appears. Given her years of experience coaching clients through security incidents, Sadia is heavily involved with data breach regulatory and litigation matters, which gives her a 360-view and understanding of the issues most important and relevant to her clients.

2021 was a transformative year for the consumer financial services world. As we navigate an unprecedented volume of industry regulation, Troutman Pepper is uniquely positioned to help its clients find successful resolutions and stay ahead of the curve.

In this report, we share developments on auto finance, background screening, bankruptcy, consumer class actions, consumer

Entities that collect Wisconsin residents’ personal information and are licensed, registered, or authorized (licensee) with the Office of the Commissioner of Insurance (commissioner) will have to abide by a new data security law (Wisconsin’s Insurance Data Security Law), which came into force on November 1. This bill had previously been introduced in the 2019-2020 legislative

The California Privacy Protection Agency (CPPA) is the first state privacy agency in the nation and was created as part of the California Privacy Rights Act (CPRA). While this agency has already been formed, it will not begin enforcement activities until July 1, 2023 (six months after the CPRA takes effect).

The agency’s mandate includes

A U.S. district judge in Illinois recently denied a motion to dismiss in a class action involving an alleged violation of the Illinois’ Right of Publicity Act (IRPA). The court determined that the defendant’s arguments were more suitable for an affirmative defense and was unpersuaded by any of the arguments.

In Krause v. RocketReach LLC

Sadia Mirza will speak on the panel “Cross Your Ts, but Watch Your Eyes – How to Improve Incident Response,” during ISACA LA’s Annual Conference. Sadia will discuss ways to improve incident response plans based on recent lessons learned from regulatory and litigation matters in the data breach context.

The event will take place April

We have long predicted that just as other states followed California in passing breach notification laws, states would follow in California’s footsteps in regulating information privacy practices with the California Consumer Privacy Act of 2018 (CCPA), which was later amended by the California Privacy Rights Act of 2020 (CPRA).[1] The Virginia state legislature recently

2020 was a transformative year for the consumer financial services world. As we navigate an unprecedented volume of industry regulation, Troutman Pepper is uniquely positioned to help its clients find successful resolutions and stay ahead of the compliance curve.

In this report, we share developments in 2020 on consumer class actions, background screening, bankruptcy,

In Wengui v. Clark Hill, PLC, Judge Boasberg of the District Court for the District of Columbia, granted the plaintiff’s motion to compel the defendant to produce a report and additional materials associated with a cyberattack. In its ruling, the court emphasized that materials that would otherwise be created in the ordinary course of

Sadia Mirza will speak during the session, “Tabletop Exercises for Your Incident Response Plan,” during Privacy OC’s Privacy Week Forums 2021. The event will take place January 28 at 11:30 a.m. PST. For more information on Privacy OC and to register, please click here.

Enforcement of the California Consumer Privacy Act (CCPA) began July 1, 2020. Our privacy team at Troutman Pepper includes several attorneys who worked in an attorney general’s office. This privacy regulatory team has identified six areas of enforcement likely to catch the California Office of the Attorney General’s (OAG) attention, which arguably holds sole regulatory