Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

Cybersecurity Awareness Month Picks: What We’re Reading and Listening To

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

We are Morrison Foerster — a global firm of exceptional credentials. Our clients include some of the largest financial institutions, investment banks, and Fortune 100, technology, and life sciences companies. Our lawyers are committed to achieving innovative and business-minded results for our clients, while preserving the differences that make us stronger.Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Prior results do not guarantee a similar outcome.

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

For Cybersecurity Awareness Month, we’re taking a look at the books and podcasts that have caught the attention of our Data, Cyber + Privacy attorneys, shaped their perspectives, and sparked new ideas across privacy, technology, cybersecurity, and beyond.<a href="https://datadecoded.mofo.com/topics/261013-cybersecurity-awareness-month-picks" target="_blank">Read more</a>.

Cybersecurity Awareness Month Picks: What We’re Reading and Listening To

Sign Up

Lili Burns is an associate in Morrison Foerster’s Data, Cyber + Privacy practice. Lili advises clients across industries on data protection best practices, complex regulatory enforcement actions, risk management strategies, national and international regulatory compliance, product development, transaction diligence, and incident response and preparedness matters.Lili advises clients in a variety of industries on complex data privacy and cybersecurity issues related to local, global, and industry-specific legal frameworks, including 23 NYCRR 500 (Part 500), the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the California Consumer Protection Act (CCPA) and similar state laws, the General Data Protection Regulation (GDPR), the Biometric Information Privacy Act (BIPA), the Health Insurance Portability and Accountability Act (HIPAA), and the Children’s Online Privacy Protection Act (COPPA).In particular, Lili has assisted clients in developing information security policies and procedures, negotiating data transfer and processing agreements, guiding regulatory strategy, advising on product development and design, and supporting corporate transactions. Lili has also advised clients regarding incident response strategy, data breaches investigations, and preparation of consumer and regulatory notifications.Lili received her J.D. from Columbia Law School, where she was recognized as both a James Kent and Harlan Fiske Stone Scholar. Lili was also involved in the Columbia Science and Technology Law Review. Lili received her B.A. in English and comparative literature from Columbia University, where she graduated cum laude, with Honors in English.

Lili Burns

Associate

Joshua Fattal advises clients across industries on data protection best practices, with a focus on emerging issues at the intersection of data privacy, security, and new technologies, including artificial intelligence (AI) and national security regulations pertaining to sensitive U.S. personal data.Joshua regularly counsels clients ranging from startups to multinational corporations on the legal implications of using AI and large language models (LLMs). He advises on compliance with global AI regulations, including the EU AI Act and Colorado AI Act, and provides guidance on AI governance, responsible AI use, and generative AI best practices.He also advises clients on compliance with U.S. laws and regulations governing the protection of sensitive data from adversary countries, including the U.S. Department of Justice Data Security Program and the Protecting Americans’ Data from Foreign Adversaries Act of 2024 (PADFAA). He has assisted in clients’ complex due diligence of their data use and disclosure practices and in developing cross-functional compliance programs to meet evolving cross-border data transfer requirements. He has represented multiple companies subject to investigation by the U.S. Federal Trade Commission and state attorneys general in connection with PADFAA and the disclosure of sensitive data.Joshua’s experience spans a variety of industries, including AI, technology, life sciences, edtech, fintech, crypto, and consumer services. He counsels clients on compliance under local, state, and federal privacy regulations such as the California Consumer Privacy Act (CCPA), biometric and financial data privacy laws, and cybersecurity regulations. He also guides clients through compliance with international frameworks like the General Data Protection Regulation (GDPR), the EU-U.S. Data Privacy Framework, and the EU ePrivacy Directive.His practice encompasses data incident response strategies, including breach investigations and regulatory notifications. He conducts privacy and cybersecurity due diligence for corporate transactions and advises on information security policies, cybersecurity governance, vendor risk management, and privacy-by-design product development. He also represents companies subject to privacy and consumer protection investigation by federal and state regulators.Joshua maintains an active pro bono practice. He has successfully secured asylum for multiple clients, including a Cameroonian political activist and a Honduran survivor of gender-based violence. He has also represented tenants in housing litigation and advised nonprofits on privacy and cybersecurity matters. Joshua served as a student mentor for the Historical Society of the D.C. Circuit 2026 Mock Court Program.Joshua earned his J.D. cum laude from NYU School of Law, where he was a Robert McKay Scholar and received the full tuition ASPIRE Cybersecurity Scholarship. He received his B.A. magna cum laude from Columbia University and is a member of Phi Beta Kappa. He previously served in the U.S. Intelligence Community, including as an attorney advisor in the Intelligence Law Division at the U.S. Department of Homeland Security. He also clerked for the Honorable Sarah Netburn, U.S. Magistrate Judge in the Southern District of New York.

Joshua Fattal

Suhna Pierce has a rare combination of technical and legal competency. With extensive experience in the information technology industry providing infrastructure engineering and support services, she has deep knowledge of the technologies and processes used in enterprise settings. As an attorney, Ms. Pierce brings practical insight into the data security matters that our clients handle on a daily basis. Ms. Pierce has worked with companies responding to regulatory inquiries regarding their privacy and data security practices, including Federal Trade Commission (FTC) investigations following data security incidents.Ms. Pierce also advises clients on complying with U.S. and foreign privacy and data protection laws. She has helped clients develop privacy policies for website visitors and privacy notices for employees and customers; establish contracts relating to cross-border data transfer and protection obligations; and carry out registrations with data protection regulators. She has assisted clients with completing multijurisdictional surveys of privacy obligations, such as comparing different countries’ requirements for marketing communications. Ms. Pierce also has experience advising clients on privacy issues related to Foreign Corrupt Practices Act compliance programs.Ms. Pierce received her J.D. from Columbia Law School in 2009 and her B.A. from Amherst College in 1993. Prior to her legal career, she worked as an IT systems engineer in a variety of environments, including Fortune 500 corporations, an IT consulting company, and a not-for-profit organization.

Suhna Pierce

Of Counsel

Marijn Storm focuses his practice on artificial intelligence regulation and emerging technology law, advising at the intersection of data protection, cybersecurity, and AI law.Based in Morrison Foerster’s Amsterdam office, Marijn counsels global technology companies, multinational corporations, and semi-governmental organizations on AI governance and compliance. He also advises clients on the design of responsible technology frameworks and their most complex privacy and data security challenges. Clients particularly value Marijn’s pragmatic approach and technical knowledge, which enable him to deliver practical, actionable solutions to their most pressing issues.Marijn has significant experience with the EU AI Act and its interplay with existing privacy, product safety, and cybersecurity frameworks. He regularly assists clients with AI governance architectures and risk-classification, post-market monitoring strategies, AI content marking and labelling obligations, and the negotiation of AI terms. Marijn also advises and trains boards, in-house legal teams, and technical teams on implementing AI and other advanced technologies in compliance with legal requirements. His work includes generative AI, behavioral biometrics, and IoT.Marijn also counsels clients on investigating and responding to major cybersecurity incidents. He has assisted multinational companies in obtaining regulatory approval for their Binding Corporate Rules in both the EU and the UK. Marijn also represents clients in complex data protection litigation, including the defense of one of the largest-ever class actions in the Netherlands relating to alleged GDPR violations.A recognized thought leader, Marijn regularly speaks at international data protection and AI conferences on topics such as AI governance, the ethical application of AI, and training EU-compliant AI models. He has authored articles for IAPP, Law360, and Corporate Compliance Insights, including on the EU AI Act Code of Practice, employee AI use, and the intersection of data privacy and AI in life sciences. Marijn has also played a leading role in developing <a href="/artificial-intelligence" target="_self">MoFo’s AI Resource Center</a>, a free online resource providing links to enacted AI laws, regulations, and guidance in 55 countries, including the United States at the federal and state levels. Since 2019, Marijn has served as an annual guest lecturer at the Tilburg Institute for Law, Technology, and Society, where he teaches Algorithmic Accountability as part of its AI & Law course.Marijn is a Dutch-qualified lawyer and is fluent in Dutch and English.

Marijn Storm

Partner

Few lawyers in the world have Miriam’s breadth and understanding of privacy and data security laws, obligations, and practices. As chair of Morrison Foerster’s preeminent global Data, Cyber + Privacy Group, leading 60+ lawyers, Miriam is regularly called upon by some of the world’s largest and most complex multinational organizations to confront their most difficult U.S. and international privacy and cybersecurity challenges. Miriam is a trusted advisor who provides legal and strategic advice on all areas of international privacy and data protection issues. She works with global companies on the planning and execution of complex global compliance efforts and helps them find practical solutions to use and manage personal information in every country in the world. She also defends regulatory matters relating to privacy and cybersecurity in the United States and internationally and advises on the Department of Justice Bulk Data Rules. Her counsel is particularly prized for cybersecurity preparedness and breach response. Miriam and her team have navigated some of the largest and most consequential cybersecurity incidents in history, including assisting Mandiant when it discovered and warned the world about the SolarWinds compromise. Having helped hundreds of clients respond to breaches, Miriam is frequently called upon to advise and educate boards of directors regarding cybersecurity and the key role that boards play in understanding and overseeing the potential risks. Miriam works with companies to develop comprehensive customized incident response plans, train staff, conduct extensive tabletop exercises, and address key issues with executive management. While she regularly advises clients on responses to ransomware attacks and other cyber extortion incidents, she works on all aspects that arise in the context of large security incidents, including communication strategies, notifications to customers, consumers, and regulators; public disclosures; interactions with law enforcement globally; litigation; and investigations by regulators around the world.Miriam serves as a board member of the ADP AI & Data Ethics Committee and is a leader in MoFo’s AI Group, a cross-practice team that provides sophisticated, full-service representation to a wide range of clients with companies that both develop and use cutting-edge, rapidly changing technology in the AI space. Miriam uses her extensive industry experience and collaborative global approach to help her clients integrate the newest trends and developments in AI with their business needs.Recognized as a market leader by all major directories, Miriam has been ranked in the top tier of privacy and data security lawyers worldwide by Chambers USA and Chambers Global for well over a decade. She was an inaugural inductee into The Legal 500 Hall of Fame, which is comprised of outstanding U.S. lawyers who have been recommended as The Legal 500’s Leading Lawyers for the last six consecutive years. The Cybersecurity Docket has recognized Miriam as one of its Incident Response 50, a list of the top data breach response lawyers globally. She has been named one of Financial Times’ Top 10 Innovative Lawyers in North America and a National Law Journal Cybersecurity and Data Privacy Trailblazer for her breakthrough work in this space. Miriam was also previously designated as an Ethisphere Attorney Who Matters and a BTI Client Service All-Star. A frequent commentator on cybersecurity, she has been interviewed by media outlets including CNBC, The New York Times, and The Wall Street Journal, among many others.

Miriam Wugmeister

Global Chair of Data, Cyber + Privacy

Data, Cyber + Privacy

Data Decoded