Amy S. Mushahwar

Amy S. Mushahwar is an experienced data privacy, security, and management attorney with nearly 20 years of experience in the technology industry in both legal and technical capacities. She focuses on data security, cyber risk, and privacy issues. As both a lawyer and former technologist, Amy is adept at helping clients unravel complex systems to fully understand legal and regulatory risk. Amy has appeared before regulators in privacy/security regulatory actions of first impression before agencies such as: the Consumer Financial Protection Bureau (CFPB), the New York Department of Financial Services (NYDFS), the Federal Trade Commission (FTC), the Federal Communications Commission (FCC) and the Department of Health and Human Services (DHHS).

Data Security: Amy advises clients regarding proactive data security measures, data breach incident response, and regulatory inquiries. She provides security guidance advice to clients in the following industries: financial services, energy, telecommunications, health care, retailers, and e-commerce companies. As a frequent incident response counsel, Amy has interacted with federal and state agencies, overseen forensics services and grey hat intelligence providers, prepared consumer notifications, and helped companies with remediation efforts after incidents. In addition to the incident response work, Amy provides compliance advice on applicable security laws, payment card brand security standards (the PCI-DSS), and security audit standards (i.e., the SANS Institute Center for Internet Security Critical Information Security Controls, SSAE-16, ISO, COBIT and NIST 800-53). Amy has also prepared and facilitated in-depth security incident simulations for her clients.

Cyber Risk: She regularly provides advice on how to conduct practical assessments of cyber risk when contracting with vendors, clients, and business partners. Amy continually drafts security clauses for a wide variety of services that address how companies can appropriately shift risk, monitor grey areas, or subject a party to ongoing due diligence. Amy’s contractual and risk management program guidance is also informed by her understanding of applicable insurance policies, such as those covering data breach incidents, cyber liability, and technical errors and omissions, as well as common insurance riders.

Privacy: Amy has assisted clients with complying with a number of privacy laws, such as the Telephone Consumer Protection Act (TCPA), Consumer Proprietary Network Information (CPNI) regulations, the Children’s Online Privacy Protection Act (COPPA), the Graham Leach Bliley Act (GLB), and the Fair Credit Reporting Act (FCRA), as well as in federal and state unfair and deceptive trade practices laws pertaining to privacy.

Amy’s data security and privacy advice is informed by her experience negotiating for businesses on privacy, cybersecurity, and Internet governance issues within international bodies, including the World Wide Web Consortium (WC3) and the Internet Corporation for Assigned Names and Numbers (ICANN). She has attended past ICANN meetings in Prague, Toronto, Beijing, and Durban.

Before entering the law, Amy spent several years as a technology consultant, performing network security design and implementation. From 1997 to 2001, she owned and operated a technology consulting company.

Good to know

Job Types Partner
Areas of Practice 1) Privacy & Security, 2) Payment Systems, 3) FinTech, 4) Communications, 5) Media and 6) IP & Technology
Law School The Catholic University of America, Columbus School of Law (J.D.,2005)
Education George Washington University (B.A.,2001)
Bar Member / Association District of Columbia State Bar Associations,Virginia State Bar Associations
Most recent firm Davis Wright Tremaine LLP
LinkedIn Profile https://www.linkedin.com/in/amymushahwar/
Relevant Jobs
Litigation Associate
USA-DC-Washington

Established DC firm seeks Attorney in Washington DC, to provide legal services & advice in the practice areas of real estate; personal injury; family law; immigration, labor; contract disputes and A...

Apply now

Attorney
USA-DC-Washington

AV-rated employment law firm seeks attorney with 4-6 years of employment law and/or litigation experience to work as a full-time litigation attorney.  The firm has an active national employment liti...

Apply now

International Arbitration Associate Attorney
USA-DC-Washington

International Arbitration Associate Attorney The candidate will join a team that handles international arbitrations representing states and state-owned entities in investor-state arbitrations, as wel...

Apply now

+ View more jobs
Coleen M. Meehan
Coleen M. Meehan

Coleen M. Meehan is a partner and trial lawyer in Morgan Lewis's Litigation Practice, resident in the Philadelphia office.

David W. Marston Jr
David W. Marston Jr

David W. Marston, Jr. is a partner in Morgan Lewis's Intellectual Property and Litigation practices and is a member of the firm's Class Action Working Group. He handles all aspects of litigation from inception through trial and post-trial appeals.

Eric Kraeutler
Eric Kraeutler

Eric Kraeutler is the leader of Morgan Lewis's Philadelphia Litigation Practice. His practice focuses on trials and appeals involving complex commercial, intellectual property, and white collar criminal matters.