Tiffany Yeung

How Tiffany Helps Clients

Tiffany Yeung focuses her practice on cybersecurity and data privacy. As a breach coach, Tiffany counsels organizations through the full lifecycle of the incident response process, which includes determining the nature and scope of the incident, coordinating forensic investigations, responding to law enforcement or other regulatory body inquiries, and identifying any legal obligations due to state, federal or international law, or contracts with third parties. Tiffany also helps clients plan ahead for data security and privacy incidents by preparing incident response plans. She also provides guidance to improve organizations’ overall compliance posture with respect to pertinent legal and regulatory frameworks.

Recent cybersecurity & data privacy projects include:

• Represented organizations potentially affected by the 2023 MOVEit ransomware attack.  
• Represented a US Department of Defense (DoD) contractor in a complex ransomware incident requiring extensive forensic investigation involving sensitive national security information, coordination with state and federal agencies, and notifications to individuals.
• Represented health care covered entities and business associates navigating various incident response processes, including the Health Insurance Portability and Accountability Act (HIPAA) privacy and security rules and complying with state breach notification requirements.
• Drafted website and mobile privacy policies for different clients, such as start-up and non-profit, in conformity with state laws and practice.
• Drafted cybersecurity incident response plan for law firm client in compliance with industry standards and best practices.

Recent corporate compliance projects include:

• Developed a detailed internal investigation work plan to assist clients gather relevant information, interview involved parties, review documents and evidence, and determine the facts surrounding the issue under investigation.
• Drafted compliance addendums to existing contracts, policies, and procedures.

Before joining Buchanan, Tiffany worked at a boutique law firm dedicated exclusively to representing organizations involving claims related to cybersecurity and data privacy. Tiffany’s prior legal experience also includes defending insurance companies in matters related to coverage and contract disputes, general liability, premise liability, and workers’ compensation.  

During law school, Tiffany served as the Vice President of the Asian Pacific-Islander American Law Student Association. Tiffany also interned at a healthcare company as a compliance and ethics fellow and at Temple University Office of University Counsel as a Philadelphia Diversity Law Group fellow. Prior to law school, Tiffany was a middle school teacher.

What Clients Can Expect

Tiffany believes that effective communication is key to building strong client relationships. By listening to her clients to better understand their goals and keeping them well-informed on matters, Tiffany helps her clients achieve the desired results.

Outside the Office

Tiffany lives in Philadelphia and enjoys traveling, attending musical and theater performances, and spending time with family and friends.