Elizabeth assists clients with satisfying their privacy obligations through meticulous attention to the changing compliance and regulatory requirements in the United States and internationally.
In her practice, Elizabeth regularly helps clients across a broad industry spectrum to prepare privacy policies, terms of use, data processing agreements, and licensing agreements, and to negotiate commercial agreements. In addition, Elizabeth helps clients assess and mitigate privacy and cybersecurity risks and respond to security incidents when they occur.
Leveraging her experience, Elizabeth also works to provide subject matter knowledge to help navigate data protection issues in M&A transactions.
Education
- Syracuse University College of Law (J.D., magna cum laude, 2018)
- Syracuse Law Review, Executive Editor; Journal on Terrorism and Security Analysis, Managing Editor;
- Justinian Honor Society; Moot Court Honor Society; Dean’s List, all semesters; CALI Award–Criminal Law, Constitutional Law II, Evidence, International Human Rights Law; Cornelius W. Wickersham Jr. Award; Robert R. Anderson Publication Award
- University of Virginia (M.A., 2014)
- Bowdoin College (B.A., 2011)
Bar Admission
- New York
- Minnesota
Publications
2024 State Consumer Privacy Law Year-In-Review
Alex Altman and Elizabeth Snyder provide an overview of the seven states that enacted comprehensive consumer privacy laws in 2024 and the specific requirements organizations must address as they come into effect.
Read More2024 State Consumer Privacy Law Year-in-Review
It was a busy year for state legislatures seeking to protect their residents’ privacy. In 2024, seven states passed comprehensive consumer privacy laws: Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey and Rhode Island. At a high level, these states have not deviated greatly from their predecessors, with each:
Obligating businesses to limit their processing of consumers’ personal data to specific purposes;
Imposing transparency obligations (e.g., providing consumers a compliant privacy notice or policy);
Requiring businesses to recognize certain consumer rights, particularly with respect to access/portability, deletion and correction;
Prohibiting or limiting the collection of “sensitive data” without consent;
Requiring organizations to allow consumers to opt out of certain processing activities, such as the sales of personal data, targeted advertising and profiling or automated decision-making.
Each
Read More