Nouha Zaabab

Nouha Zaabab's practice focuses on a variety of data privacy and cybersecurity matters, including compliance, corporate transactions, and data breach investigations and responses.

Nouha provides clients with strategic advice on compliance with state, federal, and global privacy laws, including the General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Washington My Health My Data Act (MHMD), the Federal Trade Commission (FTC) Act, and the FTC Health Breach Notification Rule (HBNR). Nouha recently assisted a multinational company in responding to complex subject access requests (SARs) under the UK GDPR.

Nouha represents buyers and sellers in domestic and cross-border corporate transactions such as mergers and acquisitions and counsels on cybersecurity and privacy matters, including due diligence. Nouha also handles global and domestic data breach investigations and responses, including advising clients on notification and other legal obligations and coordinating with local counsel across multiple jurisdictions. In addition, Nouha has experience conducting internal investigations related to whistleblower complaints and representing clients under investigation by the SEC (Securities and Exchange Commission) and other regulatory and government authorities.

Nouha maintains an active pro bono practice and involvement in the Atlanta community, and she serves on the board of directors of ISB Atlanta.