Doriann H. Cain

Privacy

In privacy, Dori’s experience spans a wide range of privacy laws, including the California Consumer Privacy Act (CCPA) and other consumer laws that have proliferated across the United States, the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), the Information Blocking Rule (IBR), and the Federal Trade Commission (FTC) Act.

With this, Dori evaluates clients’ data-handling practices, ensuring compliance through privacy gap assessments; data-mapping exercises; and the drafting of privacy compliance policies, user interfaces and vendor contracts. Dori also guides clients through privacy and cybersecurity considerations in mergers, acquisitions, private equity and venture capital transactions.

Cybersecurity

In cybersecurity, Dori develops custom incident-response plans and cybersecurity legal playbooks for clients to implement through their organizations, conducts tabletop exercises to ensure clients are prepared to respond to cybersecurity incidents, and creates cybersecurity policies.

Dori also leads clients in responding to cybersecurity incidents, including supporting internal incident-response teams, engaging with law enforcement, developing internal and external communication strategies, advising on regulatory notification and disclosure obligations, and responding to cybersecurity investigations by the government and regulators including the Office for Civil Rights and state attorneys general.

Technology

Certified as a privacy professional through the International Association of Privacy Professionals (CIPP/US), Dori provides clients with actionable insights across industries. She has a particular passion for working with health care and insurance companies that want to adopt and integrate new technologies into their businesses — such as artificial intelligence and digitalization initiatives — assisting clients with data governance and vendor management matters, along with creating policies and assessments for clients to utilize as these new technologies are implemented company-wide.