사무엘 (샘) 골드스틱은 데이터 개인정보 보호 및 사이버 보안 변호사로, 다양한 산업 분야의 고객에게 국제, 연방 및 주 데이터 개인정보 보호 및 보안법 준수와 관련된 모든 측면에 대해 자문을 제공합니다. 그는 회사의 기술 거래, 사이버 보안 및 개인정보 보호 분야의 선임 변호사이자 스포츠 및 엔터테인먼트 산업 팀과 혁신 기술 부문의 일원으로 활동하고 있습니다.

Sam counsels companies in nearly every sector of the economy — including the retail, hospitality, manufacturing, financial services, health care, insurance, sports, aerospace, energy, government contracting, education, information technology, transportation, and travel industries — on a full array of data privacy and security compliance issues, such as those involving:

• Data breach notification requirements at the state, federal, and international level
• EU and UK General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other similar comprehensive U.S. state consumer privacy laws
• Gramm-Leach-Bliley Act (GLBA)
• The New York State Department of Financial Services (NYDFS) Cybersecurity Regulation
• State insurance data security laws (including those modeled after the NAIC model law)
• Illinois’ Biometric Information Privacy Act (BIPA) and other state biometric privacy laws
• Telephone Consumer Protection Act (TCPA) and state law equivalents
• Health Insurance Portability and Accountability Act (HIPAA) and state law equivalents
• Department of Defense (DoD) cybersecurity requirements for federal contractors, including DFARS 252.204-7012, NIST SP 800-171, and CMMC

Sam assists clients of all sizes with their incident preparedness, such as reviewing and updating incident response (IR) policies and procedures, negotiating three-party agreements with forensics and other third-party IR providers to help maintain attorney-client privilege and work product protections during an incident, and running tabletop exercises that simulate real-life cyber-attacks.

On the reactive front, Sam frequently guides clients through the entire incident response process, from the early stages of the investigation to the notification of affected individuals and government regulators, as well as through any resulting enforcement actions or regulatory investigations. To date, Sam has handled hundreds of data breaches and security incidents for clients, and his depth of experience in this area allows him to provide clients with practical and business-oriented solutions in the event of a data incident and its aftermath.