When an incident leads to regulatory scrutiny, Victoria represents clients in investigations and enforcement matters involving state attorneys general and federal agencies. She helps organizations respond to inquiries arising from data security incidents and alleged privacy compliance deficiencies. Victoria also counsels clients on U.S. privacy and cybersecurity requirements, including the Health Insurance Portability and Accountability Act, the Family Educational Rights and Privacy Act, the California Consumer Privacy Act, and state data breach notification laws. Her experience includes advising organizations in the healthcare, education, and insurance sectors.
Victoria works with clients before an incident occurs to improve preparedness and reduce regulatory risk. She develops and revises incident response plans, privacy policies, data retention schedules, and other internal governance documents. She also drafts and reviews nondisclosure agreements and data processing agreements, helping clients translate privacy and cybersecurity obligations into practical policies, contracts, and response procedures.
Her experience also includes managing complex cyber insurance claims through the claims lifecycle. Victoria has handled coverage analysis, reinsurance reporting, and claim depositions while coordinating with insureds, brokers, and cross-functional stakeholders. This combination of incident response, privacy counseling, regulatory defense, and cyber claims experience enables her to consider the legal, operational, insurance, and communications issues that often converge during a cybersecurity event.
