Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

Morrison Foerster’s Privacy + Data Security Practice Recognized in Legal 500 US 2023

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

In its 2023 edition, The Legal 500 United States ranked Morrison Foerster’s leading Privacy + Data Security Group as Tier 1 in the “Cyber Law” category (which includes data privacy and data protection).

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

In its 2023 edition, The Legal 500 United States ranked Morrison Foerster’s leading Privacy + Data Security Group as Tier 1 in the “Cyber Law” category (which includes data privacy and data protection). On Cyber, clients say: “Excellent cyber team! Very informed and a good grasp of global matters.” Eight attorneys from the Privacy + Data Security Group earned individual rankings for their outstanding work in cyber law. We are grateful for our strong partnerships with our clients, who told Legal 500 “This team offers an excellent diversity in skill sets, knowledge base, and the associates are extremely capable. This allows a one-stop solution” and “The firm truly works to understand the business and its needs and feels much more like colleagues than outside counsel.” Congratulations to the Privacy + Data Security group for their continued excellence. Attorneys who received induvial rankings are highlighted below.<ul><li>Miriam Wugmeister and Kristen Mathews were both ranked in the Cyber Law: Data Privacy and Data Protection Hall of Fame for another consecutive year. Legal 500 distinguished Miriam for her excellent work leading Morrison Foerster’s Privacy + Data Security practice and assisting international companies with multinational compliance and data security incidents. Kristen’s clients told Legal 500 “Kristen Mathews stands out as one of the most skilled and competent lawyers we have ever worked with. She is unmatched among any cyber law lawyer and collaborates deftly across teams.”</li><li>Alex Iftimie was ranked as a Leading Lawyer in the Cyber Law: Data Privacy and Data Protection category, with his clients sharing “Alex Iftimie has a unique understanding of how to navigate difficult external contact points in a cyber incident” and “Alex Iftimie was great. Very personable, accessible, and knowledgeable.”</li><li>Julie O’Neill was listed as a Leading Lawyer in the Cyber Law: Data Privacy and Data Protection category. Julie’s clients report that “Julie O’Neill is fantastic. She is detailed and thorough and her guidance has always been exceptional. She provided very practicable and executable guidance. I would recommend her to others in need of privacy advice.”</li><li>Melissa Crespo has been recommended by Legal 500 US in the Cyber Law: Data Privacy and Data Protection category for routinely advising healthcare sector clients on privacy and cyber incident responses.</li><li>Marian Waldmann Agarwal was also recognized by Legal 500 US in the Cyber Law: Data Privacy and Data Protection category for her cutting-edge practice advising clients on the impacts of existing and upcoming AI regulation and the Schrems II decision.</li><li>On the Privacy Litigation side, Tiffany Cheung and Purvi Patel were both recommended for Cyber Law: Data Privacy and Data Protection. Legal 500 highlighted Tiffany’s standout work defending various media and entertainment companies against BIPA and VPPA putative class actions, and commended Purvi for her success defending clients against collection, use and disclosure of personal information claims.</li></ul>To view the complete list of Morrison Foerster’s rankings in the 2023 edition of The Legal 500 United States, please visit the publication’s <a href="https://www.legal500.com/united-states/" target="_blank">website</a>.

Morrison Foerster’s Privacy + Data Security Practice Recognized in Legal 500 US 2023

Sign Up

Few lawyers in the world have Miriam’s breadth and understanding of privacy and data security laws, obligations, and practices. As chair of Morrison Foerster’s preeminent global Data, Cyber + Privacy Group, leading 60+ lawyers, Miriam is regularly called upon by some of the world’s largest and most complex multinational organizations to confront their most difficult U.S. and international privacy and cybersecurity challenges. Miriam is a trusted advisor who provides legal and strategic advice on all areas of international privacy and data protection issues. She works with global companies on the planning and execution of complex global compliance efforts and helps them find practical solutions to use and manage personal information in every country in the world. She also defends regulatory matters relating to privacy and cybersecurity in the United States and internationally and advises on the Department of Justice Bulk Data Rules. Her counsel is particularly prized for cybersecurity preparedness and breach response. Miriam and her team have navigated some of the largest and most consequential cybersecurity incidents in history, including assisting Mandiant when it discovered and warned the world about the SolarWinds compromise. Having helped hundreds of clients respond to breaches, Miriam is frequently called upon to advise and educate boards of directors regarding cybersecurity and the key role that boards play in understanding and overseeing the potential risks. Miriam works with companies to develop comprehensive customized incident response plans, train staff, conduct extensive tabletop exercises, and address key issues with executive management. While she regularly advises clients on responses to ransomware attacks and other cyber extortion incidents, she works on all aspects that arise in the context of large security incidents, including communication strategies, notifications to customers, consumers, and regulators; public disclosures; interactions with law enforcement globally; litigation; and investigations by regulators around the world.Miriam serves as a board member of the ADP AI & Data Ethics Committee and is a leader in MoFo’s AI Group, a cross-practice team that provides sophisticated, full-service representation to a wide range of clients with companies that both develop and use cutting-edge, rapidly changing technology in the AI space. Miriam uses her extensive industry experience and collaborative global approach to help her clients integrate the newest trends and developments in AI with their business needs.Recognized as a market leader by all major directories, Miriam has been ranked in the top tier of privacy and data security lawyers worldwide by Chambers USA and Chambers Global for well over a decade. She was an inaugural inductee into The Legal 500 Hall of Fame, which is comprised of outstanding U.S. lawyers who have been recommended as The Legal 500’s Leading Lawyers for the last six consecutive years. The Cybersecurity Docket has recognized Miriam as one of its Incident Response 50, a list of the top data breach response lawyers globally. She has been named one of Financial Times’ Top 10 Innovative Lawyers in North America and a National Law Journal Cybersecurity and Data Privacy Trailblazer for her breakthrough work in this space. Miriam was also previously designated as an Ethisphere Attorney Who Matters and a BTI Client Service All-Star. A frequent commentator on cybersecurity, she has been interviewed by media outlets including CNBC, The New York Times, and The Wall Street Journal, among many others.

Miriam Wugmeister

Global Chair of Data, Cyber + Privacy

Clients seek out Julie because of her practical advice on cutting-edge issues at the intersection of privacy and consumer protection laws. She provides clients with practical solutions to compliance challenges around a wide variety of both online and offline privacy issues, including tracking, interest-based advertising, geo-targeting and other mobile tracking, personalization, and cross-device tracking. Recognized in The Legal 500 US 2014, 2016, 2019, and 2020 and Chambers USA 2021 for her exceptional legal work, her clients praise her saying, “She is really good at giving practical, targeted advice and taking stock of what the risk profile of the client is, so that the advice is holistic.” (Chambers USA).Julie provides clients with creative and practical advice on meeting the requirements of state and federal privacy laws, including the Federal Trade Commission Act (FTC), the California Consumer Privacy Act (CCPA), Children’s Online Privacy Protection Act (COPPA), and the Family Educational Rights and Privacy Act (FERPA). She crafts guidelines and compliance programs for clients’ collection, use, and disclosure of personal information in diverse contexts and throughout the life cycle of their initiatives, such as for connected products (the Internet of Things) and mobile services. She also drafts privacy and cookies policies, online service terms of use, agreements involving online and offline advertising and marketing practices, and agreements concerning a variety of data uses. In addition, Julie helps clients assess and manage privacy risks, including in connection with mergers, acquisitions, and other strategic transactions.Julie creates compliance programs for clients’ use of a wide variety of channels for communicating with and marketing to consumers, including email, telephone, text message, and fax, both in the United States and around the world. She works with clients to develop their social media strategies and to clear their social media content. She also reviews advertising in both traditional and new media for compliance with applicable laws, including Section 5 of the FTC Act and various FTC rules and guides. In addition, she works with clients to structure, market, and implement their sweepstakes, contests, and other promotions in compliance with applicable laws.As a former FTC staff attorney, Julie regularly defends companies in investigations by the FTC and before data protection authorities around the world.<h4>Representative Experience</h4><ul><li>A company that creates online software used by schools in an FTC investigation of alleged COPPA violations.</li><li>A consumer services company investigated by the Korean data protection authority for alleged privacy violations</li><li>A manufacturer in connection with a challenge of its environmental advertising claims by the FTC </li><li>An advertising services company in an investigation of alleged privacy-related violations of the FTC Act</li><li>An online provider of entertainment services in an FTC investigation of alleged COPPA violations</li><li>A beverage company in an FTC investigation of alleged COPPA violations</li></ul>Before attending law school, Julie was a Peace Corps volunteer in The Gambia, West Africa.

Julie O'Neill

Partner

Melissa Crespo helps clients navigate a wide range of challenging privacy compliance and data security matters with a focus on the health information and the health care sector. She regularly helps clients develop and implement privacy compliance programs and advises companies on managing risk in connection with cutting-edge technologies and data initiatives.Melissa has particular experience in advising clients on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other laws governing the collection and use of medical and health information.Melissa regularly counsels clients responding to data breaches and security incidents. She has successfully defended clients in numerous regulatory inquiries regarding data security practices, including investigations by the Federal Trade Commission, the U.S. Department of Health and Human Services, state attorneys general, and foreign regulators following data security incidents.Melissa also advises multinational companies on the privacy and data security aspects of their M&A transactions and has experience drafting and negotiating tailored privacy and data security contract provisions.In 2019, 2020, and 2021, The Legal 500 US recognized Melissa as a “Rising Star” in the area of cyber law, data privacy, and data protection. In 2016, she was shortlisted for the “Future Leader – Gender Diversity” award at the inaugural Chambers USA Diversity Awards. Melissa was a 2015 recipient of the Burton Award for Legal Achievement, which honors excellence in legal writing.Melissa earned her J.D., cum laude, from Howard University School of Law.

Melissa Crespo

Marian Waldmann Agarwal is a partner in the Data, Cyber + Privacy Group at Morrison Foerster. She also co-leads the firm’s Artificial Intelligence Group and is a member of the global Environmental, Social, and Governance (ESG) Responsible Tech Committee. Marian’s unique blend of business and legal skills, honed through her background in information systems and business management, is a key asset in her role. Her in-house experience as a secondee to two different companies has provided her with firsthand knowledge of the internal business needs required for company initiatives to succeed. Marian has been instrumental in advising global clients on the developing field of AI. Clients seek her guidance due to her extensive understanding of, and experience with, the ethical use of AI and the developing legal compliance requirements, including data privacy and regulatory provisions, in connection with the design and implementation of innovative AI tools. Her work extends to helping clients identify and mitigate the potential risks associated with AI technologies.Marian counsels clients across a range of industries, including technology, finance, consumer goods and services, healthcare, insurance, media, and hospitality. She assists in designing and building their privacy programs, advising on compliance with U.S. and foreign privacy and data protection laws, such as the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR). Her work includes drafting internal policies, procedures, and guidelines for legal and non-legal audiences that incorporate privacy best practices and legal requirements in daily operations. One of Marian’s core strengths is her ability to comprehensively assess and improve privacy programs, and ensure they remain compliant with evolving privacy laws and regulations. She also drafts and negotiates contracts to protect clients’ data in key commercial agreements, advises on cross-border data transfer issues, and assists with completing multijurisdictional surveys of privacy obligations.In addition, Marian uses her privacy, data security, and AI implementation skills to provide pro bono counseling services to a variety of non-profit clients.Marian received her J.D. from University of Pennsylvania Law School in 2004 and her B.S. and M.B.A. from the State University of New York at Buffalo in 1999. Prior to attending law school, she worked as an application specialist for a small software company.

Marian A. Waldmann Agarwal

Clients seek out Tiffany for her successful track record in defending class action claims on behalf of clients in a broad range of industries, including technology, healthcare, and consumer product companies.Tiffany leads high-stakes class actions at the cutting edge of innovation and technology. She has a successful track record of defending industry-leading clients in their most complex class actions. She also has advised extensively on privacy matters, unfair business practice claims and consumer advertising issues. Tiffany is co-chair of the firm’s Technology Industry Group and a former co-chair of MoFo’s global Litigation Department and the firm’s Complex Litigation + Advisement Practice Group.The Daily Journal named Tiffany to its list of Top Women Lawyers and listed her as a 2026 Leading Commercial Litigator in California. Chambers USA 2025 again ranked her in commercial litigation and privacy & data security litigation, while The Legal 500 2025 again recommended her in general commercial disputes, product liability and marketing and advertising. Lawdragon named Tiffany on its 2026 list of 100 Leading AI & Legal Tech Advisors. BTI Consulting Group has recognized Tiffany as one of a small group of attorneys nationwide who represent the “absolute best of the best” in the area of client service. Her clients include leaders in the technology, healthcare, financial services, and retail sectors.Because she is committed to the firm’s pro bono program, Tiffany works on diverse matters in that arena, including representing numerous clients in connection with guardianship and immigration proceedings.Tiffany earned her B.A. with high honors from the University of California, Berkeley and was a member of Phi Beta Kappa. She received her J.D. from the University of California, Boalt Hall School of Law, where she was editor-in-chief of the Asian Law Journal. Following law school, she was a judicial clerk for the Honorable Marian Blank Horn of the United States Court of Federal Claims and also served as a judicial clerk for the Honorable Susan R. Bolton of the United States District Court for the District of Arizona.

Tiffany Cheung

Purvi G. Patel is the former managing partner of the Los Angeles office.Purvi represents retail, e-commerce, and other consumer-oriented businesses in significant advertising, unfair competition, consumer fraud, and privacy matters. She has built a robust practice advising household names on various compliance issues and defending them in complex and class action litigation in federal and state courts across the country, winning motions to dismiss, defeating class certification, and securing summary disposition in several multi-million dollar lawsuits. Purvi is a strategic and practical thinker who is in tune with her clients’ priorities, which leads to successful outcomes both inside and outside the courthouse.Practice Leader. Purvi has a defined niche that cuts across the firm’s Consumer Litigation, Class Actions, and Data, Cyber + Privacy Groups. With a focus on businesses’ collection of personally identifiable information (PII), Purvi is a recognized leader in defending lawsuits involving the collection, use, and disclosure of PII. In addition, due to her vast experience handling class action litigation for clients across sectors, Purvi has notched significant victories for industry-leading companies, including securing summary judgment and defeating class certification in some of the most plaintiff-friendly jurisdictions nationwide.Purvi’s extensive litigation experience uniquely positions her to counsel clients on compliance with established and emerging laws and regulations, including the potential privacy implications of business practices relating to the collection of PII. Purvi is an expert in numerous California privacy laws, including the California Consumer Privacy Act, the California Invasion of Privacy Act, and California’s Song-Beverly Credit Card Act (and analog statutes in effect in other states).Purvi is also committed to the firm’s pro bono initiatives and has worked on a number of pro bono matters during her tenure at the firm. Most recently, she represented an interfaith coalition of more than 50 religious organizations as amici in various cases challenging the 2017 “travel ban” Executive Orders. In 2014, Purvi successfully argued a Ninth Circuit appeal on behalf of a U.S. citizen who was wrongfully subjected to two years of pre-trial detention as a result of a detainer imposed by U.S. Immigration and Customs Enforcement (Mendia v. Garcia, 768 F.3d 1009 (9th Cir. 2014)).Firm Leader. Purvi is committed to advancing diversity at Morrison & Foerster. For more than five years, she served as the Co-Chair of the firm’s Diversity Strategy Committee. During her tenure, Purvi contributed significantly to the Committee’s success, including implementing a LGBTQ+ Gender Inclusive Policy, and launching MoFo’s innovative Allies Network. She was the firm’s Leadership Council on Legal Diversity (LCLD) Fellow in 2014 and remains active in the organization as an alumna. In addition, Purvi served as hiring partner for the Los Angeles office between 2015 and 2023.Community Leader. Purvi is also actively engaged in the community. In 2019, she was a founding board member of Legal Education Access Pipeline (LEAP), a fellows program dedicated to increasing access to legal education for underrepresented populations.  She has also been working with “Just the Beginning – A Pipeline Organization” (JTB) since 2015 when she joined an inaugural steering committee of judges, in-house and outside counsel, and educators to launch a Los Angeles-based Summer Legal Institute. She is a past co-president of the South Asian Bar Association of Southern California (SABA-SC), and in 2023, was honored with its Trailblazer award. She was selected for her “trailblazing efforts which have paved the way for a more inclusive and representative profession” and “her commitment to breaking barriers in the legal profession.” In 2019, Purvi was named SABA-SC’s Mentor of the Year.Representative Matters<ul><li>Privacy Class Action Litigation. Defending software development company in two putative class actions brought under state common law based on alleged violations of the federal Children’s Online Privacy Protection Act. Obtained dismissal of putative privacy class action against Southern California grocery store chain, which was affirmed on appeal. </li><li>Class Action Litigation Relating to Consumer PII. Represented national retailers in more than 30 California Song-Beverly Credit Card Act and Massachusetts’ Song-Beverly analog matters arising out of the alleged collection of PII, securing favorable settlements or walkaways for many following early negotiations with plaintiffs’ counsel. Trial attorney for national retailers in two Song-Beverly class actions. For Target Corporation, led pre-MDL team coordinating and managing responses to single-plaintiff and putative class action complaints filed in wake of data breach.</li></ul><ul><li>False Advertising and Consumer Class Action Litigation. Defeated class certification for household-name companies in numerous matters involving consumer protection claims arising out of alleged misrepresentations and omissions as well as lawsuits brought under unfair competition, false advertising, and product liability laws. Also obtained dismissals at the pleadings stage in cases alleging unfair, unlawful, and fraudulent marketing and advertising practices.</li></ul>

Purvi Patel

Data, Cyber + Privacy

Data, Cyber + Privacy Litigation