Susana Medeiros is a senior associate and a member of the Global Cybersecurity and Privacy team. She is a Chambers ranked attorney recognized as an Associate to Watch for her experience in eDiscovery and Information Governance.

eDiscovery

Susana has extensive experience advising on complex eDiscovery issues including defensible collection of electronically stored information and conducting spoliation investigations.  She formulates creative strategies for the defensible and efficient preservation, identification, collection, review, and production of electronically stored information in response to requests in civil investigations and litigation. She focuses not only on tactical eDiscovery issues in particular cases, but advises clients regarding strategic e-discovery portfolio management, and data governance.  Susana has advised clients on how to best manage electronic discovery and preservation, and helped clients develop litigation readiness protocols for use across their matters.

Information Governance

As part of her information governance practice, Susana helps clients mature their information governance program by developing internal information management, preservation, and data classification policies and procedures and record retention schedules.  This includes providing advice on data migrations, defensible disposition, mobile device management, ephemeral data, and disaster recovery and business continuity systems.

Cybersecurity and Privacy

Susana has represented clients both preparing for and responding to cyber incidents.  Leveraging her traditional eDiscovery experience, Susana also assists clients with efficiently and defensibly responding to cyber incidents to quickly identify data subjects impacted and the types of personal information impacted, and advise clients about the scope of the incident and the company's obligations to notify the appropriate authorities and the people affected by the breach.  She also assists with providing advice around CCPA/CPRA, HIPAA, FTC Act, GDPR, and state privacy law compliance from an information governance and data minimization perspective.