• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

Sara Pullen

Sara Pullen

About Sara Pullen

Sara’s practice focuses on privacy compliance, technology transactions, and intellectual property, with a strong focus on health care and medical technology and is recognized for her ability to bridge legal, technical, and clinical domains. Drawing on her background as an ICU nurse and her MBA, she brings a unique, practical perspective to advising clients across industries.

[Read Bio]

Your AI Scribe May Be Taking Notes (and Plaintiffs Are Too)

April 27, 2026 By Daniel Felz, Jennifer Everett, Jennifer Pike and Sara Pullen

On April 7, 2026, several plaintiffs (“Plaintiffs”) filed a putative class action complaint in the Northern District of California against Sutter Health, Memorial Health Services Inc. and Memorial Care Medical Foundation (the “Providers”).  The complaint alleges the Providers illegally recorded Plaintiffs’ confidential medical information by using an AI-powered “ambient clinical documentation” tool to record clinician-patient […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI)

“Show Your Work, AI”: Congress Pushes for AI Model Transparency

April 8, 2026 By Cynthia Cole, John Lesko and Sara Pullen

On March 26, 2026, a bipartisan group of U.S. lawmakers introduced H.R. 8094, titled the “AI Foundation Model Transparency Act of 2026” (“AI FMTA”). At its core, the AI FMTA would require developers of certain large AI Models, like ChatGPT or Claude, to publicly disclose key information about how the models are trained, what the […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), Privacy & Cyber Regulatory Enforcement Tagged With: AI FMTA, ChatGPT, Claude, Legislation

New Jersey Expands HIPAA-Based Exemptions Under Its Comprehensive Privacy Law

February 16, 2026 By Jennifer Everett, Dorian Simmons and Sara Pullen

On January 20, 2026, the New Jersey Governor signed Assembly Bill A5017 (“Amendment”), amending the New Jersey Data Protection Act (“NJDPA”). The Amendment exempts data that is not protected health information (“non-PHI”) from the NJDPA when it is handled by covered entities or business associates in accordance with the privacy and security requirements of the […]

Filed Under: Crisis & Data Breach Response, HIPAA/Health Information Privacy, Security & Breach Response Tagged With: Cybersecurity, Data Protection, Health Information Security, HIPAA, HITECH, Privacy, US State Law

Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables

November 19, 2025 By Sara Pullen, Angela Burnette and Jennifer Pike

Move over HIPAA…the health privacy landscape may be in for a shakeup. On November 4, 2025, Senator Bill Cassidy, M.D. (R-LA) introduced the Health Information Privacy Reform Act (HIPRA), a bill aimed at closing a gap in health data protections. HIPAA has long governed the privacy of traditional medical records held by health care providers […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response Tagged With: Health Information Privacy, Health Information Security, Privacy, Regulatory Enforcement

Unlocking the MIND Act: The Senate To Take on the Challenge of Neurotechnology

September 25, 2025 By Sara Pullen

On September 24, 2025, Ranking Member Cantwell (D-Wash.), Leader Schumer (D-NY), and Senator Markey (D-Mass.) announced they will introduce the “Management of Individuals’ Neural Data Act of 2025” (“MIND Act”).  If enacted, the MIND Act will direct the Federal Trade Commission (“FTC”) to conduct a comprehensive study and report on the collection, processing, storage, sale, […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), Board Governance & Cyber Risk Management, HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement, Privacy & Cybersecurity Litigation Tagged With: Artificial Intelligence, Data Protection, Federal Trade Commission (FTC), Health Information Security, Neuroprivacy, Privacy, Senate

  • Page 1
  • Page 2
  • Page 3
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • Your AI Chats May Be Used Against You – CEO’s ChatGPT Records Appear in Judicial Opinion Concerning $250 Million Earnout
  • Your AI Scribe May Be Taking Notes (and Plaintiffs Are Too)
  • Challenge to Utah’s App Store Accountability Act Voluntarily Dismissed Following Statutory Amendments
  • The World Data Organization: A New Player in Global Data Governance – What Businesses Need to Know
  • Secure Connectivity for Operational Technology—UK NCSC Publishes New Guidance
Copyright © 2026 · Alston & Bird · All Rights Reserved. Privacy.