Sasha Hondagneu-Messner

Regulatory and Enforcement Experience

• Advised companies on a range of security incidents, including business email compromises, credential stuffing attacks, ransomware, supply chain incidents, and cyber extortion.
• Assisted clients before the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services (HHS), the Financial Industry Regulatory Authority (FINRA), the New York Department of Financial Services (NYDFS), the Cyber Safety Review Board, and other federal and state regulators.
• Assisted clients in class action litigation and regulatory inquiries related to security incidents, data processing, and data protection.
• Drafted comments on proposed rules to agencies such as HHS and the SEC.
• Assisted in an internal investigation for a health insurance company concerning data sharing and HIPAA compliance.

Counseling and Advice

• Revised agreements relating to privacy and cybersecurity, including data processing addendums, information security addendums, and transition service agreements.
• Drafted privacy policies, terms of service, and information security policies and procedures.
• Counseled the portfolio companies of a private equity firm in privacy and data protection.
• Advised financial services companies on cyber examinations with the Federal Financial Institutions Examination Council (FFIEC), FINRA, and NYDFS.
• Counseled a cryptocurrency exchange concerning compliance with securities laws.

Transactional Experience

Sasha has provided privacy and cybersecurity counsel on various transactions including:

• RelaDyne LLC, a portfolio company of American Industrial Partners, in its acquisition of Sun Coast Resources, Inc.
• Colliers in its strategic investment in Rockwood Capital, LLC, a U.S. real estate investment management firm with more than US$12 billion of assets under management.
• nCino in its definitive agreement to acquire SimpleNexus, a homeownership platform that connects borrowers, loan officers, real estate agents, and settlement service providers throughout the home-buying process, in a stock and cash transaction valued at approximately US$1.2 billion.
• ServiceTitan in its acquisition of Aspire Software, a provider of management software solutions for customers in the landscaping business.
• Symplr in its purchase of healthcare supply chain management software provider GreenLight Medical, Inc.

Sasha is a Foundry Fellow with the Internet Law & Policy Foundry. He also serves on the Young Lawyers and Professionals Advisory Panel for the ABA Antitrust Law Section’s Privacy and Information Security Committee.

Sasha is a member of the American Bar Association and the International Association of Privacy Professionals (CIPP/US).