Tiffany Quach, Esq.

Business / Contracts, Business Formation, Trademarks (Transactional)

New York, New York

Personal Introduction

I am an experienced Harvard Law- and Stanford-educated attorney and advise on matters relating to commercial contracts, technology, intellectual property, licensing, privacy & data security, consumer protection, and marketing & advertising. At my law firm Lucia Law, I act as outside General Counsel for a number of start-up companies. Prior to co-founding Lucia Law, I practiced at the BigLaw firms Morrison & Foerster, LLP and Proskauer Rose LLP in New York for 6 years. I have been recognized by the legal publications Legal 500 (“Rising Star” in Cyber Law (2019 and 2020)) & Best Lawyers in America (“One to Watch” in Technology Law (2021)). I hold the CIPP/US & CIPP/E certifications from the International Association of Privacy Professionals (IAPP), and have presented on advertising law at the IAPP’s Global Privacy Summit.

Practice Composition

Transactional

Education

Harvard Law School Doctor of Jurisprudence/Juris Doctor (J.D.) (2015)

Stanford University Bachelor of Arts (B.A.) (2011)

Practice Summary

I offer advising, document drafting & contract negotiation services in the following areas: 1) Technology & vendor agreements, including customer & user agreements, Master Service Agreements, SLAs & data protection agreements 2) Software agreements, including SaaS, API, cloud computing, software development & software services agreements 3) Intellectual property agreements, such as license agreements, development agreements & IP assignments 4) E-commerce & consumer protection, including advising regarding the FTC's rules and enforcement, and drafting website terms of service & consumer disclosures 5) Consumer outreach & communications technology (TCPA, text messaging programs, telemarketing, email marketing, CAN-SPAM, VoIP, etc.), online advertising & marketing, influencer marketing & social media 7) Privacy & data protection advising, documentation and compliance with GDPR, CCPA/CPRA, HIPAA, GLBA, FCRA, etc., including data protection addenda, privacy policies, etc. 8) Data breach & incident response, data security documentation, & compliance with data security legal & contractual requirements, such as PCI-DSS & data security regulations 9) Trademark application, clearance, registration & maintenance, applying to Amazon Brand Registry, and IP & brand protection & enforcement (including Amazon IP enforcement for removing counterfeit or infringing products) 10) Other commercial agreements, such as service agreements, partnership agreements, nondisclosure agreements & release forms