Katherine Doty Hanniford

Cybersecurity

• Advised multiple Fortune 500 and 1000 companies during complex, privileged computer crime investigations requiring a crisis response and legal analysis under state, federal, and international laws. Specific engagements included multinational data breaches, cyber-enabled fraud, business email compromise, and ransomware.
• Advised multiple SEC-registered investment advisers, broker-dealers, and public companies on their cybersecurity policies and procedures, including their incident response plans. Conducted tabletop exercises of clients’ incident response plans.
• Represented multiple health care clients involved in ransomware attacks, requiring complex forensic investigation and extensive data review and restoration processes, as well as in follow-on regulatory inquiries.
• Provided ongoing analysis and advice to a global logistics and supply chain management company on privacy and security incident response.
• Assisted health care plans and insurance companies in their incident response efforts and follow-on federal and state regulatory investigations.
• Advised an insurance broker and risk management firm with multiple affiliates and covered entities in the development and implementation of its cybersecurity program in compliance with the New York Department of Financial Services cybersecurity requirements.
• Advised a major retailer in developing a comprehensive information security program for all levels of the enterprise.
• Advised a systemically important financial market utility on a range of corporate governance, regulatory compliance, and examination matters.
• Advised a broker-dealer and electronic trading platform’s crisis management and response team as lead outside counsel.

Kate Hanniford focuses her practice on cybersecurity and privacy compliance and enforcement. Kate has provided advice on a range of cybersecurity topics, including compliance with various cybersecurity standards, managing cyber risk at all levels of the enterprise, cybersecurity governance, and responding appropriately to security incidents. She also actively monitors cybersecurity-related legislative and regulatory developments at the state and federal levels to provide advice on potential impacts. Kate advises clients on privacy and security issues along the data life cycle including implementing enterprise-wide privacy and security policies, compliance strategies, privacy and security issues in complex transactions, and privacy regulatory enforcement.

Kate also assists securities-industry clients with compliance with SEC and FINRA rules and standards, including SEC (OCIE) examination preparation and enforcement matters as well as Reg SCI and cybersecurity preparedness. She is well-versed in the scale and complexity of incident response in highly regulated industries, having handled incident response for public issuer, broker-dealer, and investment adviser data security and privacy incidents as well as some of the largest health care breaches in recent years. The Best Lawyers in America^® regularly recognizes Kate on its “Ones to Watch” list in the areas of Technology Law and Privacy and Data Security Law. She has also been named to Cybersecurity Docket’s 2024 “Incident Response 50.” Kate is a Certified AI Governance and Information Privacy Professional.

律师资格

• 纽约
• 哥伦比亚特区

学历

• University of Texas (职业法律博士, 2009)
• Swarthmore College (学士学位, 2000)

Memberships