We draft and update privacy notices and policies for a national financial services institution, and advise with respect to data collection, storage and usage matters.
We also represent the company with data security incident response, including when in 2022, the client was informed that their customer data may have been compromised as the result of a data breach at a student loan services provider that affected more than 2.5 million student loan borrowers throughout the United States.
We advised our client’s legal departments, boards, executive leadership, and IT teams on incident response efforts and strategy, which included coordinating incident response and data forensics teams; advising on mitigation and remedial actions; drafting and coordinating individual and government notifications; and preparing responses to government investigations arising from the incidents.