Sam Goldstick, Cipp∕Us, Cipp∕E Email & Phone Number

Milwaukee, WI, US

Milwaukee, WI, US

• Member of the firm's Technology Transactions, Cybersecurity and Privacy Practice and Sports & Entertainment Group
• Advise clients in every sector of the economy on complying with various privacy laws and regulations, such as HIPAA, GDPR, CCPA, CPRA, VCDPA, CPA, COPPA, CAN-SPAM Act, NYDFS Cybersecurity Regulation, GLBA, state.
• Prepare and revise organizations' privacy, data security, and incident response policies, procedures and plans, as well as third-party vendor agreements; assist clients negotiate privacy and security terms in their.
• Help clients prepare for and respond to data breaches and security events through proactive and reactive measures, such as by facilitating tabletop exercises and streamlining the notification process to ensure.
• Develop enterprise-wide enterprise-wide privacy and security compliance programs for companies in the U.S. and abroad.
• Conduct privacy impact assessments to identify gaps between companies' compliance requirements and operations.

Cleveland, OH, US

• Member of the firm's Data Privacy and Cybersecurity Practice.
• Advised domestic and international companies on regulatory compliance obligations under applicable data security and privacy laws, including U.S. state breach notification laws, HIPAA and GLBA; industry cybersecurity.
• Assisted clients as a “breach coach” to coordinate and quarterback effective responses to data breaches and non-reportable incidents across a broad range industries, including healthcare, hospitality, financial.
• Provided clients with crisis management counseling in the event of a breach or data security event, and manage all aspects of the incident response process including investigation, notification, remediation and.
• Handled more than 350 data breaches and security incidents involving system-wide malware attacks, phishing scams, ransomware infections, lost or stolen laptops/paper documents, insider wrongdoing and misdirected.
• Prepared notice letters in compliance with all state and federal breach notification laws; drafted media statements and FAQs.

• Advised 501(c)(3) non-profit organization that assists underserved children locally and globally on various legal matters including contracts, bylaws, and donor and board of director obligations.

Worldwide, OO

• Member of the firm's Information Technology, Privacy & Data Security and Financial Industry Practice Groups.
• Represented several financial services industry clients against claims alleging violations of consumer privacy under the TCPA, FCRA and FDCPA, and similar state law claims for invasion of privacy, defamation, IIED and.
• Advised clients on their compliance obligations under state and federal consumer protection laws.
• Counseled a 3D software company on privacy issues and common theories of liability applicable to "data scraping" under U.S. and Canadian law.
• Developed a comprehensive Incident Response Plan and Written Information Security Policy for a large hospitality client.
• Drafted privacy and data protection policies for a global digital media service provider to ensure compliance with EU data protection law following the invalidation of the U.S.-EU Safe Harbor Framework.

Chicago, Illinois, US

US

Juris Doctor (J.D.), Law

Ba, Political Science, Legal Studies, Criminal Law & Justice