Photo of Sadia Mirza

Sadia leads the firm’s Incidents + Investigations team, advising clients on all aspects of data security and privacy issues. She is the first point of contact when a security incident or data breach is suspected, and plays a central role in her clients’ cybersecurity strategies.

With all 50 states in the process of lifting stay-at-home orders, many businesses are eager to reopen but remain committed to protecting their most important assets — their employees. As part of establishing reopening procedures, some businesses have considered collecting health-related information from employees to prevent the spread of COVID-19 among the workforce.

While collecting

To view this resource as a pdf, please click here.

A review of privacy and data breach class action lawsuits reveal an ongoing trend. Plaintiffs filing these actions, time and time again, rely on the same allegations concerning missteps taken by an organization in the areas of privacy and data security. Allegations usually range

There is no shortage of legislation to address the coronavirus (“COVID-19”) pandemic and the emerging contact tracing applications. In late April 2020, Republican senators introduced a bill called the COVID-19 Consumer Data Protection Act that aims to provide consumers more transparency, choice, and control over information collected in connection with COVID-19. Then, in May, Democrats

Authors:
Wynter L. Deagle, Partner, Troutman Sanders
Sharon R. Klein, Partner, Pepper Hamilton
Alex C. Nisenbaum, Partner, Pepper Hamilton
Ronald I. Raether, Partner, Troutman Sanders
Anne-Marie Dao, Associate, Troutman Sanders
Sadia Mirza, Associate, Troutman Sanders

Attorney General Xavier Becerra submitted the final proposed regulations package under the California Consumer

The novel coronavirus (“COVID-19”) has resulted in the California legislature rolling out several emergency initiatives to address the impact of the outbreak. Initiatives range from introducing measures to address key employment issues to financial packages that provide funding to increase hospital capacity and protect those most vulnerable to the disease. Given the immediate impact these

Authors:

Wynter Deagle
Sharon Klein
Alex Nisenbaum
Ron Raether
Anne-Marie Dao
Sadia Mirza

Businesses awaiting final California Consumer Privacy Act (CCPA) regulations will likely be waiting until after enforcement of the CCPA begins on July 1.

Prior to the regulations taking effect, the attorney general must submit proposed regulations to the state Office of Administrative

Miniclip, S.A., a Swiss-based company developing online games, recently settled with the Federal Trade Commission over false claim allegations made in connection to the Children’s Online Privacy Protection Act (“COPPA”). In its complaint, the FTC alleged that Miniclip falsely claimed to be a valid member of the Children’s Advertising Review Unit’s (“CARU”) COPPA safe harbor

There is never an opportune time to be the victim of a ransomware attack, but with the growing impact that COVID-19 is having on businesses and the increased pressure they already face, a ransomware attack in today’s environment could certainly prove to be disastrous. Cybercriminals are leveraging the pandemic for their commercial gain and we

On April 30, a group of senators announced their plan to introduce the “COVID-19 Consumer Data Protection Act” (the “Act”). The Act would cover the collection and use of personal geolocation, health, and proximity data, and provide measures to hold businesses accountable to consumers if they misappropriate personal data to fight the coronavirus

On Friday, April 23, the United States District Court for the District of Columbia approved Facebook’s $5 billion settlement with the Federal Trade Commission, nearly 10 months after the FTC had announced it in July 2019. The settlement is the largest penalty in history for a violation of consumer privacy, the largest obtained by the