Sam Goldstick, Cipp∕Us, Cipp∕E Email & Phone Number

Milwaukee, Wi, Us

Milwaukee, Wi, Us

Member of the firm's Technology Transactions, Cybersecurity and Privacy Practice and Sports & Entertainment Group• Advise clients in every sector of the economy on complying with various privacy laws and regulations, such as HIPAA, GDPR, CCPA, CPRA, VCDPA, CPA, COPPA, CAN-SPAM Act, NYDFS Cybersecurity Regulation, GLBA, state insurance privacy and data security laws, DFARS, CMMC 2.0, the FTC Act, Canada's Anti-Spam Law, as well as U.S. state data security, breach notification and cybersecurity laws. • Prepare and revise organizations' privacy, data security, and incident response policies, procedures and plans, as well as third-party vendor agreements; assist clients negotiate privacy and security terms in their vendor agreements.• Help clients prepare for and respond to data breaches and security events through proactive and reactive measures, such as by facilitating tabletop exercises and streamlining the notification process to ensure compliance with applicable law.• Develop enterprise-wide enterprise-wide privacy and security compliance programs for companies in the U.S. and abroad. • Conduct privacy impact assessments to identify gaps between companies' compliance requirements and operations.• Regularly contribute to Foley's dedicated privacy and cybersecurity blog and 50-state data breach notification laws chart online.

Cleveland, Oh, Us

Member of the firm's Data Privacy and Cybersecurity Practice.• Advised domestic and international companies on regulatory compliance obligations under applicable data security and privacy laws, including U.S. state breach notification laws, HIPAA and GLBA; industry cybersecurity standards and best practices; and EU data protection regulations.• Assisted clients as a “breach coach” to coordinate and quarterback effective responses to data breaches and non-reportable incidents across a broad range industries, including healthcare, hospitality, financial services, insurance, retail, higher education, professional services and telecommunications.• Provided clients with crisis management counseling in the event of a breach or data security event, and manage all aspects of the incident response process including investigation, notification, remediation and regulator interface (including federal regulators, such as the HHS Office for Civil Rights, and state attorneys general).• Handled more than 350 data breaches and security incidents involving system-wide malware attacks, phishing scams, ransomware infections, lost or stolen laptops/paper documents, insider wrongdoing and misdirected communications.• Prepared notice letters in compliance with all state and federal breach notification laws; drafted media statements and FAQs.• Guided organizations through regulatory investigations arising from data breaches without the imposition of fines, penalties or enforcement actions.• Counseled clients on complying with applicable foreign law in relation to cross-border data transfers, including the GDPR and the Privacy Shield framework.• Actively contributed to the firm's dedicated data privacy blog.

• Advised 501(c)(3) non-profit organization that assists underserved children locally and globally on various legal matters including contracts, bylaws, and donor and board of director obligations.

Worldwide, Oo

Member of the firm's Information Technology, Privacy & Data Security and Financial Industry Practice Groups. • Represented several financial services industry clients against claims alleging violations of consumer privacy under the TCPA, FCRA and FDCPA, and similar state law claims for invasion of privacy, defamation, IIED and unfair and deceptive trade practices. • Advised clients on their compliance obligations under state and federal consumer protection laws. • Counseled a 3D software company on privacy issues and common theories of liability applicable to "data scraping" under U.S. and Canadian law. • Developed a comprehensive Incident Response Plan and Written Information Security Policy for a large hospitality client. • Drafted privacy and data protection policies for a global digital media service provider to ensure compliance with EU data protection law following the invalidation of the U.S.-EU Safe Harbor Framework. • Drafted complaints and answers, motions, affidavits, and settlement agreements for commercial and consumer defense litigation matters in state and federal court; draft and respond to discovery requests. • Secured summary judgment dismissals and dismissals on the pleadings in multiple consumer protection lawsuits. • Negotiated settlement reduction of 95% in one case ($65,000 to $3,000) and 88% in second case ($20,000 to $2,500), below plaintiff's original demand. • Successfully defended against plaintiff's claims in seven arbitration cases (client's counterclaims granted in full in each case) and a disputed claim in a bankruptcy proceeding (obtained dismissal with prejudice). • Regularly contributed to the firm's dedicated privacy and data security blog.

Chicago, Illinois, Us

Us

Juris Doctor (J.D.), Law

Ba, Political Science, Legal Studies, Criminal Law & Justice