Photo of Sadia Mirza

Sadia leads the firm’s Incidents + Investigations team, advising clients on all aspects of data security and privacy issues. She is the first point of contact when a security incident or data breach is suspected, and plays a central role in her clients’ cybersecurity strategies.

Please join Troutman Sanders attorneys, Ronald Raether, Ashley Taylor, Avi Schick, and Sadia Mirza for a Complimentary Webinar, “COVID-19: CCPA and Regulatory and Governmental Litigation Update” on Thursday, May 7, 2020 from 1:00 – 2:00 p.m. ET.

With the California Consumer Privacy Act (CCPA) enforcement date around the corner, we will provide

On April 17, a class action complaint was filed by plaintiff Heather Sweeney against Life on Air, Inc. – creator of the video chat app Houseparty – and Epic Games, Inc. in the United States District Court for the Southern District of California. Epic is the company behind the popular video game, Fortnite, and acquired

The Federal Trade Commission released guidance for increasing privacy and data security while videoconferencing over the internet. The FTC is recommending that video conference users take the following steps:

  1. Make sure that only those individuals who were invited to the meeting are in attendance by securing the meeting by password or providing unique meeting and/or

Please join Troutman Sanders attorneys, David Anthony, John Lynch, Ron Raether, Alan Wingfield, and Sadia Mirza for the Complimentary Webinar, “Quick Answers to Critical COVID-19 Compliance Questions for Financial Services Companies” on March 31st from 3-4 pm ET.

The coronavirus (COVID-19) has rapidly altered the legal and regulatory landscape on which

Privacy and cybersecurity should be considered as organizations think about how to tackle the effects of the coronavirus (“COVID-19”) outbreak. Questions to consider include: (1) What is considered “reasonable security procedures” when businesses are forced to abruptly shift to a remote workforce? (2) How should businesses balance employees’ privacy rights against the need to keep

As the coronavirus (“COVID-19”) continues to spread, businesses are pushed to make swift decisions that impact not only business operations, but also the privacy and security of employees’ personal information. In times like these, the Fair Information Practice Principles (“FIPPs”) should be every organization’s guiding light.

The FIPPs are principles that address the privacy of

Many privacy and data protection statutes require businesses to implement “reasonable security procedures” to protect personal information. See, e.g., Cal. Civ. Code § 1798.81.5 (requiring businesses that own, license, or maintain personal information about a California resident to implement and maintain reasonable security procedures and practices appropriate to the nature of the information).

In many of the settlement agreements and stipulated orders in the FTC’s recently released 2019 Privacy and Data Security Update, the FTC repeatedly imposed a set of uniform mandates for businesses to implement following a data breach. Businesses subject to the new California Consumer Privacy Act may be able to use this mandate to

On Feb. 3, plaintiff Bernadette Barnes filed a class action lawsuit hoping to be the first case to rely on the new California Consumer Privacy Act (CCPA). The complaint was filed over a data breach that allegedly occurred before the CCPA’s Jan. 1, 2020, effective date.

Given this timing, this case will not test the