Amanda Rose Martin

P: 216.348.5774

Amanda is an associate in the firm's national Data Privacy and Cybersecurity Practice Group and focuses her practice specifically in the area of data privacy and cybersecurity.

Amanda advises a broad range of clients in the areas of data privacy and cybersecurity. Amanda has extensive experience managing data security incident response, including containment, forensics, notification and communication for cross-industry clients. Among other types of incidents, she has counseled on various ransomware variants, cyber extortion events, business email compromise, vendor and MSP incidents, employee incidents, unauthorized or accidental access and/or disclosure incidents. Following these incidents, Amanda advocates for clients in communications with law enforcement and state and federal regulators relating to initial security incident notifications and subsequent investigations.

Amanda has experience in advising clients on risk management and compliance with privacy laws, including: California Consumer Privacy Act (CCPA); General Data Protection Regulation (GDPR); Health Insurance Portability and Accountability Act (HIPAA); Gramm-Leach-Bliley Act (GBLA), and privacy, data breach, and biometric laws in all US jurisdictions. 

Amanda assists her clients with developing and evaluating privacy programs, procedures and policies for compliance and industry best practices, including: Incident Response Plan (IRP), Written Information Security Program (WISP), bring your own device, remote work, password management, computer and electronic usage and employee exit policies. To ensure that her clients are ready to respond to an incident, she coordinates and leads tabletop exercises with clients and provides solutions-focused feedback. 

Complementing her data privacy and cybersecurity work, Amanda works with clients in the fintech and emerging technologies space. She frequently counsels clients on online flow, apps, electronic transactions, communications, and marketing. Amanda provides practical and dynamic advice to clients with respect to consumer credit laws, payments laws, ESIGN and state Uniform Electronic Transaction Acts, consumer protection laws, state Unfair and Deceptive Acts and Practices (UDAP) laws and Federal Trade Commission enforcement actions and guidance. Amanda also advises clients on data retention and destruction policies, and policies related to analytics, marketing and advertising, lead generating and brokering activity.