Overview
Trish Carreiro is an experienced cybersecurity and privacy litigator who advises clients on privacy compliance and data breach response. She is certified with the International Association of Privacy Professionals (IAPP) as both a certified information privacy professional (CIPP/US) and certified information privacy manager (CIPM), and is co-chair of the IAPP’s South Florida chapter.
Trish is experienced in high-stakes cybersecurity litigation and has particular depth of experience in privacy and cybersecurity program management in highly regulated industries, such as insurance, health care, and financial services, as well as privacy compliance for large retailers and other organizations seeking broad privacy compliance.
Trish serves as outside privacy and cybersecurity counsel to companies of all sizes, tailoring her advice to her clients’ particular legal needs and risk tolerance. Her clients range from Fortune 500 companies to small universities and health care startups.
As a recognized privacy and cybersecurity thought leader, Trish uses her litigation perspective to guide clients to both avoid, and effectively handle, privacy and cybersecurity litigation. Her insights have been featured in publications including Bloomberg Health Law & Business, Law360, Law.com, Corporate Counsel, Today’s General Counsel, InsideCounsel, The Cybersecurity Law Report, Data Breach Today, Health IT Security, Healthcare IT News, Healthcare Infosecurity, Life Annuity Specialist, Fierce Healthcare, Daily Business Review, Miami Herald, Dark Reading, STAT, and Tampa Bay Business Journal.
A frequent speaker and author, Trish has written dozens of articles on cutting-edge topics such as:
- Class action breach litigation.
- The use of big data, machine learning, and AI in the life insurance industry.
- The health care industry’s use of health apps and wearable technology, and challenges surrounding HIPAA compliance for work-from-home and telehealth programs.
When COVID-19 struck, Trish was one of the first to begin writing about the privacy and cybersecurity challenges facing the health care industry, and how to navigate them. She has represented health care providers in class action breach litigation, executed data breach response for numerous health care providers, represented health care providers throughout post-breach Office for Civil Rights and attorneys general investigations, and drafted comprehensive HIPAA compliance programs for HIPAA-covered entities.
Trish’s experience with emerging technologies has developed into a niche practice in the life insurance industry. She has helped numerous life insurers navigate the morass of state and federal privacy laws to market their products in new and innovative ways, streamline their privacy compliance, adjust to changing laws, digitize their application process, increase consumer engagement, and apply new technologies and data to underwrite their risk. From drafting the necessary notices and consents, to developing the process for presenting and recording authorizations, Trish has used her expertise to help propel the insurance industry forward.
Her prior experience includes time with the U.S. Department of Justice Criminal Division’s Fraud Section, the U.S. Securities and Exchange Commission Division of Enforcement, the New York State Attorney General’s Medicaid Fraud Unit, and the Connecticut Commission on Human Rights and Opportunities. She is proficient in Spanish and Portuguese.