Tania Soris

Tania focuses her practice on advising data-driven companies on data privacy and cybersecurity issues. She works with companies across a wide range of industries – from startups to large Fortune 500 multinationals. She is an International Association of Privacy Professionals (IAPP) Certified Information Privacy Professional for the United States (CIPP/US) and Europe (CIPP/EU).

Tania advises clients on complying with US and international data protection laws, including the California Consumer Privacy Act of 2018 (CCPA) and similar laws passed in other states, Washington’s My Health My Data Act (MHMDA), Section 5 of the Federal Trade Commission Act (FTC Act), the Children’s Online Privacy Protection Act (COPPA), the Telephone Consumer Protection Act (TCPA), New Jersey’s Daniel’s Law, the Gramm-Leach-Bliley Act (GLBA), the Payment Card Industry Data Security Standard (PCI DSS), and the European Union’s General Data Protection Regulation (GDPR) and ePrivacy Directive.

Tania’s notable representative experience includes:

• Negotiating contracts involving the collection, receipt, sale, transfer, and security of personal information and other confidential and sensitive data on behalf of multinational organizations operating in a variety of different markets
• Assisting multinational organizations with privacy- and security-related compliance projects, including counseling organizations on steps required to prepare for an initial public offering from a privacy and data protection standpoint
• Counseling organizations in various industries through data breaches and other cybersecurity incidents, including drafting incident response plans, sending breach notifications and responding to regulator inquiries
• Assisting clients with buy-side and sell-side transactions, including counseling companies undergoing a sale through the diligence and disclosures process, as well as helping companies going through an acquisition by identifying privacy and data security risks

Publications

• Co-author, “New Hampshire and New Jersey Pass Comprehensive Consumer Privacy Laws,” Cooley cyber/data/privacy insights blog, March 13, 2024
• Co-author, “Inundated With Requests Under New Jersey's Daniel's Law?,” Cooley cyber/data/privacy insights blog, February 12, 2024
• Co-author, “FTC Targets Algorithmic Discrimination in Settlement With Rite Aid,” Cooley cyber/data/privacy insights blog, January 29, 2024
• Author, “FTC Increasingly Looks to Public Companies’ SEC Disclosures for Privacy and Cybersecurity Enforcement Opportunities,” Cooley cyber/data/privacy insights blog, March 17, 2020