Education Privacy Law

Representative Experience

• Conducted detailed audits of multiple public and private institutions' data privacy and security policies, then worked closely with institutions to implement data privacy and security programs that comply with U.S. Department of Education guidelines.
• Served as breach counsel and handled all aspects of phishing attack experienced by large state university.
• Guided multiple institutions through data breach response, including restoring system integrity, notifying law enforcement, conducting forensic analysis, and issuing required notices to regulatory agencies and impacted individuals.
• Trained colleges and universities on data privacy and security best practices.
• Assisted university foundation with numerous privacy law compliance issues, including drafting its new data processing agreement with the university, assisting with FERPA compliance questions, responding to a data security incident, and conducting vendor due diligence.
• Advised international architectural and design firm on international privacy law compliances issues in Europe, APAC, and Latin America, including drafting privacy policy and employee privacy notice.