Sasha Hondagneu-Messner

Regulatory and Enforcement Experience

• Advised companies on a range of security incidents, including business email compromises, credential stuffing attacks, ransomware, supply chain incidents, and cyber extortion.
• Assisted clients before the U.S. Securities and Exchange Commission (SEC), the U.S. Department of Justice (DOJ), the U.S. Department of Health and Human Services (HHS), the Financial Industry Regulatory Authority (FINRA), the New York Department of Financial Services (NYDFS), the Cyber Safety Review Board (CSRB), the Federal Trade Commission (FTC), state attorneys general, as well as other federal and state regulators.
• Assisted clients in class action litigation and regulatory inquiries related to security incidents, consumer protection, data processing, and securities law.
• Drafted comments on proposed rules to agencies such as HHS and the SEC.
• Advised on public disclosures, including with respect to 8-K and 10-K filings.

Counseling and Advice

• Counseled clients on privacy and cybersecurity compliance issues related to evolving laws and regulations, including COPPA, FCRA, GLBA, HIPAA, NYDFS, state privacy laws, TCPA, VPPA, and various industry standards.
• Revised agreements relating to privacy and cybersecurity, including data processing addendums, information security addendums, business associate agreements, and transition service agreements.
• Drafted privacy policies, terms of service, and information security policies and procedures.
• Advised financial services companies on cyber examinations with the Federal Financial Institutions Examination Council (FFIEC), FINRA, and NYDFS.

Transactional Experience

Sasha has provided privacy and cybersecurity counsel on various transactions including:

• A consortium, headed by APG Asset Management N.V. (APG), on behalf of the largest Dutch pension fund, ABP, and Australian Retirement Trust (ART), in the acquisition of Riverstone Holdings’ equity stake in Pattern Energy Group LP (pending).
• Clearlake Capital Group, L.P. in its US$4.4 billion take-private acquisition of Alteryx, Inc.
• Clearlake Capital and Motive Partners-Backed BetaNXT in its acquisition of Mediant Communications.
• United Airlines in a historic agreement to purchase 100 Boeing 787 Dreamliners with options to purchase 100 more.
• Stonepeak in its agreement to provide a US$200 million strategic growth investment to TeleGuam Holdings, LLC.
• Stone Point Capital LLC in their investment in IEQ Capital, LLC, an independent wealth management firm and alternative investment solutions provider with over US$18.3 billion in regulatory assets under management.
• Avid Technology, Inc. (NASDAQ: AVID) in its all-cash US$1.4 billion acquisition by an affiliate of STG.
• Symplr in its purchase of healthcare supply chain management software provider GreenLight Medical, Inc.

Sasha is a Foundry Fellow with the Internet Law & Policy Foundry. He also serves on the Young Lawyers and Professionals Advisory Panel for the ABA Antitrust Law Section’s Privacy and Information Security Committee.

Sasha is a member of the American Bar Association and the International Association of Privacy Professionals (CIPP/US, CIPM).