• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

Sara Pullen

Sara Pullen

About Sara Pullen

Sara’s practice focuses on privacy compliance, technology transactions, and intellectual property, with a strong focus on health care and medical technology and is recognized for her ability to bridge legal, technical, and clinical domains. Drawing on her background as an ICU nurse and her MBA, she brings a unique, practical perspective to advising clients across industries.

[Read Bio]

Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables

November 19, 2025 By Sara Pullen, Angela Burnette and Jennifer Pike

Move over HIPAA…the health privacy landscape may be in for a shakeup. On November 4, 2025, Senator Bill Cassidy, M.D. (R-LA) introduced the Health Information Privacy Reform Act (HIPRA), a bill aimed at closing a gap in health data protections. HIPAA has long governed the privacy of traditional medical records held by health care providers […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response Tagged With: Health Information Privacy, Health Information Security, Privacy, Regulatory Enforcement

Unlocking the MIND Act: The Senate To Take on the Challenge of Neurotechnology

September 25, 2025 By Sara Pullen

On September 24, 2025, Ranking Member Cantwell (D-Wash.), Leader Schumer (D-NY), and Senator Markey (D-Mass.) announced they will introduce the “Management of Individuals’ Neural Data Act of 2025” (“MIND Act”).  If enacted, the MIND Act will direct the Federal Trade Commission (“FTC”) to conduct a comprehensive study and report on the collection, processing, storage, sale, […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), Board Governance & Cyber Risk Management, HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement, Privacy & Cybersecurity Litigation Tagged With: Artificial Intelligence, Data Protection, Federal Trade Commission (FTC), Health Information Security, Neuroprivacy, Privacy, Senate

To Delete or Not to Delete: Can 23andMe Really Sell Genetic Data Via Bankruptcy?

April 7, 2025 By Daniel Felz, Joyce Gresko, William Sugden, Kennedy Bodnarek, Anna von Spakovsky and Sara Pullen

On March 23, 2025, 23andMe Holding Co. (“23andMe”) filed for bankruptcy in the Eastern District of Missouri, potentially setting in motion the sale of genetic data collected from more than 15 million people.  This has led to news outlets and state Attorneys General encouraging consumers to delete their 23andMe data before it is sold as […]

Filed Under: Consumer Protection/FTC, HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement

California Joins the Neural Data Bandwagon

September 12, 2024 By Sara Pullen

On August 31, the California assembly passed SB1223, which amends the CCPA/CPRA to include “neural data” as a type of sensitive data.  SB1223, which is likely to become law, defines “neural data” as “information that is generated by measuring the activity of a consumer’s central or peripheral nervous system, and that is not inferred from […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), California Privacy & the CCPA, HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement, Uncategorized

Making (Brain) Waves: New Colorado Legislation Poised to Protect Privacy of Neural Data

January 19, 2024 By Sara Pullen

Neurotechnology, like wearable EEG headbands and invasive brain implants, collects information from electrical nerve impulses and brain waves derived from your brain, spinal cord, or nervous system.  This information, or neurodata, is valuable, unique, potentially individually identifiable, and has the potential to provide access to a person’s memories, biases, and intentions.  (For more information, see […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement

  • Page 1
  • Page 2
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • New EU Regulation Clarifies Cybersecurity Rules for IoT Devices and Other ‘Products with Digital Elements’
  • California AG Announces $1.4 Million Settlement with Mobile App Provider for Alleged CCPA Violations
  • SEC Dismisses Remaining Claims Against SolarWinds
  • The EU Digital Omnibus: A European Data Law Shake-Up May Be Coming
  • UK Cybersecurity Legislation Soon to be Introduced
Copyright © 2025 · Alston & Bird · All Rights Reserved. Privacy.
This website uses cookies to improve functionality and performance. By continuing to browse this site, you are consenting to the use of cookies on this website.