Sarah’s practice focuses on regulatory, cybersecurity, privacy and access to information matters. She provides advice to clients of all sizes on proper information collection, use and disclosure practices, and the development of privacy and cybersecurity policies, including best practices to prepare for and respond to a privacy breach. She drafts online privacy policies and terms of use for websites and mobile applications.  Sarah also acts for universities, municipalities, health records custodians and private third parties with respect to their information practices and responding to access to information requests.  In her regulatory practice, Sarah’s clients include national and regional private sector companies looking to operate in various regulated industries in Atlantic Canada, including insurance, financial services, and consumer lending.