Share Print Page
 

DATA PRIVACY & CYBERSECURITY

Businesses and organizations of all sizes and industries are facing increased threats to their data stewardship on the one hand, and constantly evolving regulatory requirements and growing prosecutorial regimes on the other. And it’s only getting more challenging.

Our approach

Our Data Privacy and Cyber Security team provides counsel on threat prevention and mitigation in the context of your key business drivers: Intellectual Property, Financial/Fiduciary, Regulatory/Compliance, Operational, Growth/Opportunity, Strategy, Human Capital and Reputation/Brand.

We employ an integrated approach focused on 1) preventing attacks through proactive mitigation programs; 2) monitoring and detecting potential cyber risks; and 3) responding to breaches and other adverse events. We customize our Data Privacy and Cyber Security services to your business—size, industry, technologies, stakeholders, and compliance regimes.

Our platform starts with your business needs and “ends” with an intense focus on helping you “get back to business” and drive enterprise value. It’s a comprehensive, business-minded, intelligent approach to managing, mitigating and responding to cyber threats.

Trends we’re watching in 2015-16

  • Business leaders (not just IT departments) will be increasingly held directly accountable for data privacy controls and response to breaches.
  • Incident response plans will need to consider how to instantly email those affected and reset user passwords on a massive scale.
  • Wearable technologies and internet of things (IoT) will continue to proliferate, expanding the number of access points to and vulnerability of Protected Health Information (PHI) and other sensitive data.
  • Terms of Service and vendor agreements will increasingly require provisions to mitigate liability and protocol for privacy matters.
  • Employees will continue to be the biggest threat to cyber security, predominantly through negligence, requiring increased security training programs.
  • State-level regulations will increase, providing a patch-work of data privacy and breach laws, making compliance increasingly difficult.
  • Consumers will increasingly reach “data breach fatigue,” taking less action to protect themselves, requiring businesses to re-think their pre- and post-breach communications.
  • Commercial drone use will continue to proliferate, putting some companies under both aviation and privacy regulations for the first time.

Who we work with

  • All businesses, organizations and government entities that collect, transmit or store sensitive or personally identifiable information
  • All industries including technology, health care, finance, infrastructure, defense, energy, big data, social media, data storage and professional services
  • Companies using mobile apps, websites and social media. Whether communicating with, collecting information from, advertising to or doing business with clients and customers, they and others are impacted by the Telephone Consumer Protection Act (TCPA) and the Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM)
  • Health care providers, insurance companies, pharmacies, clearinghouses, business associates and others impacted by the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH) and the Omnibus Rule
  • Those who market goods or services to children under the age of 13 and others impacted by the Children’s Online Privacy Protection Act (COPPA)
  • All companies that receive and store the personal financial information of their clients and customers, and others impacted by the Gramm-Leach-Bliley Financial Services Modernization Act (GLBA) and state data security laws
  • Law firms, accounting firms and other professional advisors working with sensitive client information
  • Law enforcement agencies

Recognition

  • Recognized by Chambers USA as a nationwide leader in the Field of Privacy Law

Representative experience

  • Defended a client in litigation involving the theft of 1.7 million patient records
  • Provided emergency response and compliance strategy for clients following the theft or loss of large amounts of sensitive information. Recent examples include:
    • A lost laptop containing the personal information of over 11,000 individuals from 31 different states
    • Website hacking incident involving the personally identifiable information of over 3,000 individuals
  • Represented numerous clients in privacy violation investigations by the Office for Civil Rights and state regulatory entities
  • Provide ongoing privacy and security counsel to a large utility
  • Counseled a pharmaceuticals company in corporate privacy and security issues and provided worldwide employee privacy training
  • Built enterprise-wide privacy and security framework for startup companies in the health care industry, municipalities and large corporations
  • Assisted clients with their applications for “safe harbor” under the Federal Communications Commission (FCC)
  • Developed and implemented website privacy policies and terms and conditions of use for a variety of clients in diverse industries

      Media Clips

      • Laws Try to Resolve Employer-Employee Social Media Conflicts
        Wall Street Journal | May 28, 2015
        Providence Commercial Litigation counsel Steven Richard is quoted in this article discussing how state laws on social media are impacting employer-employee relations in the absence of an overarching federal law.
      • Are Employers Responsible for an Employee's Unauthorized Review of a Patient's Confidential Health Information?
        Journal of the American College of Radiology | May 1, 2015
        This contributed column discusses employer liability for employees who improperly access confidential patient information. This piece is authored by Albany Health Care partners Laurie Cohen and Peter Millock, counsel Barbara Asheld and Long Island associate Brooke Lane.
      • Future of FTC Data Security Enforcement Hinges on Forthcoming Wyndham Ruling
        Bloomberg BNA Privacy and Data Security Law Resource Center | January 2, 2015
        Providence partner and leader of the firm’s Privacy & Data Protection group Linn Freedman is quoted in this article discussing a matter before the U.S. Court of Appeals which presents an unprecedented opportunity to define the Federal Trade Commission's authority to police the data security practices of U.S. companies.
      • . . . View all . . .
      • Retailers Must Not Ignore Security Alerts, Court Says
        CSO | December 15, 2014
        San Francisco Commercial Litigation partner Karl Belgum is quoted in this article on the implications of a Minnesota federal court's decision regarding Target’s data breach litigation indicating expansive retailer liability for stolen credit card data.
      • National Notification Law Unlikely
        Law Technology News | December 2, 2014
        Providence partner and leader of the firm’s Privacy & Data Protection group Linn Freedman is noted as a featured panelist and is quoted in this article recapping the ALM Cybersecurity and Data Protection Legal Summit.
      • Walgreen Case Opens Door for State Law HIPAA Claims
        Law360 | November 25, 2014
        Providence partner and leader of the firm’s Privacy & Data Protection group Linn Freedman authored this piece discussing new openings for state law claims of Health Insurance Portability and Accountability Act violations against covered entities and business associates.
      • Wearable Wellness
        HR Executive | October 1, 2014
        San Francisco Labor & Employment associate Alexandra Devendra is quoted in this feature story on personal health information confidentiality and HIPAA’s nondiscrimination provision concerning employee use of wearable devices.
      • Is Anyone Really 'HIPAA Compliant' in Healthcare?
        Forbes | September 29, 2014
        Providence partner and leader of the firm’s Privacy & Data Protection team Linn Freedman provides commentary in this column on understanding and adhering to HIPAA across the entire digital health ecosystem.
      • Assessing the Financial Impact of 4.5 Million Stolen Health Records
        Forbes | August 25, 2014
        This column discusses the impact of Community Health System’s data breach. Partner and leader of the firm’s Privacy & Data Security team Linn Freedman acts as a third-party source.
      • CHS Starts Notification Process Following Huge Breach
        Health Data Management | August 19, 2014
        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman provides third-party commentary on Community Health Systems’ data breach of protected health information.
      • 3 Cybersecurity Steps Defense Contractors Need To Take
        Law360 | August 5, 2014
        Washington, DC, Government Investigations & White Collar Defense partner Grayson Yeargin, Washington, DC, Commercial Litigation and Government Contracts partner Vince Napoleon and Washington, DC, Commercial Litigation associate Katherine Bastian discuss steps companies doing business with the government should take as they are facing new cybersecurity requirements.
      • Employment bar deconstructs new social media privacy law
        Rhode Island Lawyers Weekly | August 4, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman discusses the Employee Social Media Privacy Act signed into law by Rhode Island Gov. Lincoln Chafee.
      • Directors to Watch 2014
        Directors & Boards | August 1, 2014
        Partner Linn Freedman, member of the board of directors of Roger Williams University and Roger Williams Law School, is featured among the publication’s ninth annual class of directors to watch.
      • Lab I.T. Put to the Test
        Health Data Management | June 1, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia discuss provisions under a federal rule to give patients or designated representatives the right to receive copies of medical test results from most clinical laboratories.
      • LabMD Ruling Puts FTC In Driver's Seat On Data Security
        Law360 | May 14, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman discusses a federal judge’s ruling refusing to disrupt a Federal Trade Commission administrative proceeding against LabMD Inc.
      • Data Protection and Privacy Laws
        Financier Worldwide Magazine | May 1, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman is one of the featured industry sources in this piece on effectively handling, using, transferring and managing data. Click here to read the roundtable discussion.
      • Any Calls, Texts, or Photos May Be Used Against You
        Boston Bar Journal | April 1, 2014
        Boston Government Investigations & White Collar Defense partner Gerry Leone, Providence Government Investigations & White Collar Defense partner and Privacy & Data Protection team leader Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia co-authored this column discussing warrantless cell phone searches and personal privacy issues.
      • Patients Get Direct Access to Lab Reports
        Clinical Laboratory News | April 1, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman discusses how labs should comply with patient requests for records under a new rule issued by the Department of Health and Human Services.
      • Latest Insider-Trading Case Highlights Law Firms' Risks
        Wall Street Journal | March 21, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman provides commentary in this article about the need for law firms to properly safeguard confidential client information.
      • Understanding the New Rule for Patient Access to Lab Results
        Health Data Management | February 12, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia discuss the new Health and Human Services rule, which allows patients and their personal representatives access to lab test reports and results from laboratories.
      • FTC Continues To Push Privacy Breach Enforcement
        Law360 | January 17, 2014
        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia authored this column discussing efforts to ensure that adequate privacy and security practices and procedures are in place to protect employee and consumer data as the Federal Trade Commission’s enforcement initiatives increase.
      • LabMD Unleashes Trump Card in FTC Data Security Fight
        Law360 | November 22, 2013
        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman discusses the implications of the Federal Trade Commission’s data breach claims against LabMD Inc.
      • Good Privacy Practices Help Your Firm Survive and Thrive
        Rochester Business Journal | November 8, 2013
        Rochester Global Business & Transactions partner Jeff LaBarge and Buffalo Products: Class Action, Industry & Trade Representation counsel Jacob Herstek discuss why and how companies should have a strong compliance plan in the event of a data breach.
      • Why Product Manufacturers Should Heed Privacy Trends
        Product Liability Law & Strategy | November 1, 2013
        Buffalo Products: Class Action, Trade & Industry Representation counsel Jacob Herstek, a member of the firm’s Privacy & Data Protection team, authored this column discussing privacy as a touchstone issue for product manufacturers to keep in mind as they work to build and keep consumer trust.
      • FCC Set to Enforce New Telephone Privacy Rules
        Direct Marketing News | October 3, 2013
        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman discusses new rules under the Federal Communications Commission's Telephone Consumer Protection Act (TCPA) that can have serious repercussions for marketers.
      • What LabMD's Data Security Breach Tells Us About FTC
        Law360 | October 3, 2013
        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia note that businesses that maintain, collect, receive or transmit consumers' information should be aware that the Federal Trade Commission considers a data security breach to fall under the umbrella of "unfair and deceptive" practices.
      • Will Regulation Lead the Way to Safer Health Care?
        Health Data Management | September 1, 2013

        This feature article focuses on potential regulation by the U.S. Food and Drug Administration of health information technology systems. Leader of the firm’s Privacy & Data Protection group and the HIPAA Compliance group Linn Freedman provides commentary.

      • Proceed With Caution
        Health Data Management | July 1, 2013

        In this cover story, leader of the firm’s Privacy & Data Protection group and the HIPAA Compliance group Linn Freedman discusses information technology security concerns and other related issues that have kept mental health data in the shadows.

      • Final HIPAA Omnibus Rule Expands Law's Impact on Firms
        New Hampshire Business Review | May 3, 2013

        Providence partner and leader of the firm’s Privacy & Data Protection group Linn Freedman and Manchester partner and leader of the firm’s Commercial Litigation practice Scott O’Connell co-authored this article discussing the final HIPAA Omnibus Rule, which implemented sweeping changes to the Health Insurance Portability and Accountability Act.

      • 11th Circuit says HIPAA protections trump Florida law
        Reuters | April 12, 2013

        Leader of the firm’s Privacy & Data Protection group and the HIPAA Compliance group Linn Freedman discusses a Court of Appeals ruling finding that the patient privacy protections in the federal Health Insurance Portability and Accountability Act of 1996 trumped a 1987 Florida law that requires nursing homes to provide the records to a deceased resident's spouse, guardian or attorney.

      • New HIPAA Rules Pose Challenges for Healthcare Industry
        Reuters | March 18, 2013

        Leader of the firm’s Privacy & Data Protection group and the HIPAA Compliance group Linn Freedman discusses the new Health Insurance Portability and Accountability Act (HIPAA) regulations announced by the Department of Health & Human Services. Click here to read the full article.

      • The Use of Mobile Technology in the Practice of Medicine: Compliance Tips
        Bloomberg BNA Health Law Reporter | February 12, 2013

        Providence partner and leader of the firm’s Privacy & Data Protection group Linn Freedman authored this column highlighting practical tips for physicians and other health care providers to maximize the advantages of using mobile technology in their day-to-day practices while complying with privacy and security rules. Click here to read the article.

      • Red Alert
        The American Lawyer | January 1, 2013

        Partner and leader of the firm’s Privacy and Data Protection team Linn Freedman provides commentary about security issues for U.S. attorneys working and traveling abroad.

      • Newsmaker: Getting involved is first step to improving education
        Providence Business News | December 24, 2012

        Partner and leader of the firm’s Privacy & Data Protection team Linn Freedman is featured in this Q&A–style profile. The article focuses on Linn’s recent appointment to the board of the Women Entrepreneurs in Science and Technology and her other commitments outside the office.

      • Defending Big Data
        Law Technology News | October 1, 2012

        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman discusses the escalating accumulation of data and why attorneys, IT staff, and data professionals are paying closer attention to big data and its potentially thorny legal, ethical, and technological issues. Click here to read the article.

      • Privacy & Security: Enforcement activities have ‘increased dramatically'
        CMIO (Chief Medical Information Officer) | August 15, 2012

        Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman is profiled in this two-part series discussing privacy and security issues as it relates to the health care industry.

      • ‘Cloud' Advisory Puts Small Firms on Notice
        Massachusetts Lawyers Weekly | August 13, 2012

        Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman provides commentary on the ethics advisory opinion from the Massachusetts Bar Association on the use of Internet data storage providers, which has some small firms and sole practitioners taking a second look at “cloud” safety.

      Ideas

      What's trending on NP Privacy Partner
      NP Privacy Partner | July 31, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | July 24, 2015

      . . . View all . . .

      FCC's extensive declaratory ruling on TCPA heightens risks and obligations for businesses (Part 2)
      Privacy Alert | July 23, 2015

      FCC's extensive declaratory ruling on TCPA heightens risks and obligations for businesses
      Privacy Alert | July 20, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | July 17, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | July 10, 2015

      Rhode Island enacts Identity Theft Protection Act of 2015
      Privacy Alert | July 6, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | July 2, 2015

      Pending amendment to California data privacy law would extend protection to geophysical location and biometric data
      Privacy Alert | July 2, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | June 26, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | June 19, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | June 12, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | June 5, 2015

      BIS proposes new export controls on cybersecurity technologies
      Export Controls & Economic Sanctions Alert | June 4, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | May 29, 2015

      Song-Beverly credit card opinion highlights need for retailers to review their procedures for credit card transactions
      Retail Alert | May 27, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | May 22, 2015

      Supreme Court to again consider whether "picking off" class representatives through a Rule 68 offer of judgment moots class action claims
      Class Action Alert | May 19, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | May 15, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | May 8, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | May 1, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | April 24, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | April 17, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | April 10, 2015

      Connecting the dots—how third-party onlookers may trigger a breach of EU privacy laws
      Privacy Alert | April 8, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | April 3, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | March 27, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | March 20, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | March 13, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | March 6, 2015

      Influential judge weighs in on disclosure obligations for users of technology assisted review
      Electronic Discovery and Evidence Law Alert | March 4, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | February 27, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | February 20, 2015

      The FAA releases long awaited proposed rules for small Unmanned Aircraft Systems
      Aviation Law Alert | February 20, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | February 13, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | February 6, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | January 30, 2015

      Labor & employment 2015 crystal ball
      Employment Law Alert | January 29, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | January 23, 2015

      President Obama's proposals for a safe, secure cyberspace
      Privacy Alert | January 20, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | January 16, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | January 8, 2015

      What's trending on NP Privacy Partner
      NP Privacy Partner | December 24, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | December 19, 2014

      2015 Business and Legal Trends to Watch
      December 19, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | December 12, 2014

      Newest OCR settlement: Health center agrees to $150,000 payment for Security Rule violations
      HIPAA Alert | December 10, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | December 5, 2014

      Recent decision in Target data breach litigation supports expansive retailer liability for stolen credit card data
      Retail Alert | December 3, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | November 26, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | November 21, 2014

      Appeals Court affirms $1.4M jury verdict against Walgreen Company
      HIPAA Alert | November 19, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | November 14, 2014

      OCR provides guidance on HIPAA in public health emergencies
      Health Care Alert | November 12, 2014

      $750,000 Wind River penalty could signal change in scrutiny of encryption exports
      Export Controls & Economic Sanctions Alert | November 11, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | November 7, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | October 31, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | October 24, 2014

      Do courts like the service of legal process via social media?
      Social Media Law Alert | October 22, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | October 17, 2014

      California adopts new data privacy legislation affecting retailers
      Retail Alert | October 15, 2014

      Webinar Recording: Tech Talk 101: are you fluent in the language of data security?
      Originally recorded October 8, 2014 | October 14, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | October 10, 2014

      The Second Circuit speaks: accessing a social media web page is not enough to authenticate it
      Electronic Discovery and Evidence Alert | October 7, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | October 3, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | September 26, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | September 19, 2014

      Trying to unmask and sue the anonymous social media speaker
      Social Media Law Alert | September 17, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | September 12, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | September 5, 2014

      Whose "likes" are they?
      Social Media Law Alert | September 3, 2014

      The NLRB sends a clear message to employers — think twice before striking back at employee social media comments
      Social Media Law Alert | September 2, 2014

      What's trending on NP Privacy Partner
      NP Privacy Partner | August 29, 2014

      What's trending in data privacy & security
      Privacy Alert | August 22, 2014

      What's trending in data privacy & security
      Privacy Alert | August 15, 2014

      What's trending in data privacy & security
      Privacy Alert | August 8, 2014

      Defense and intelligence contractors need to take these three steps to meet new cybersecurity requirements
      Government Contracts Alert | August 5, 2014

      What's trending in data privacy & security
      Privacy Alert | August 1, 2014

      Cloud users and providers: Have you thought of the U.S. export control laws?
      Export Controls & Economic Sanctions Alert | July 29, 2014

      What's trending in data privacy & security
      Privacy Alert | July 25, 2014

      What's trending in data privacy & security
      Privacy Alert | July 18, 2014

      Webinar Recording: Cloud Computing: are you trading compliance for convenience?
      Originally recorded July 8, 2014 | July 11, 2014

      What's trending in data privacy & security
      Privacy Alert | July 11, 2014

      What's trending in data privacy & security
      Privacy Alert | July 3, 2014

      "Get a warrant": in colorful opinion, Supreme Court announces bright-line rule protecting privacy in cell phone data
      Privacy Alert | June 27, 2014

      What's trending in data privacy & security
      Privacy Alert | June 27, 2014

      What's trending in data privacy & security
      Privacy Alert | June 20, 2014

      What's trending in data privacy & security
      Privacy Alert | June 13, 2014

      What's trending in data privacy & security
      Privacy Alert | June 6, 2014

      What's trending in data privacy & security
      Privacy Alert | May 30, 2014

      What's trending in data privacy & security
      Privacy Alert | May 23, 2014

      What's trending in data privacy & security
      Privacy Alert | May 16, 2014

      What's trending in data privacy & security
      Privacy Alert | May 9, 2014

      Wearables in the workplace: three traps for unsuspecting employers
      Employment Law Alert | May 6, 2014

      What's trending in data privacy & security
      Privacy Alert | May 2, 2014

      California legislature moves toward enacting new restrictions on merchants' collection and retention of credit card data, and additional liabilities for data breach
      Retail Alert | April 30, 2014

      What's trending in data privacy & security
      Privacy Alert | April 25, 2014

      What's trending in data privacy & security
      Privacy Alert | April 18, 2014

      Federal antitrust enforcers encourage competitor collaboration to combat cyber threats
      Antitrust Alert | April 16, 2014

      What's trending in privacy & data security
      Privacy Alert | April 14, 2014

      European high court strikes down Data Retention Directive aimed at telecommunications and Internet service providers
      Privacy Alert | April 8, 2014

      What's trending this week in privacy & data security
      Privacy Alert | March 28, 2014

      Cybersecurity risks and data breaches taking front row at SEC in 2014
      Privacy Alert | March 27, 2014

      First data breach class action with no claim for financial harm settled: AvMed settles for $3M
      Privacy Alert | March 7, 2014

      FTC announces approval of safe harbor program under the revised COPPA Rule
      Privacy Alert | February 21, 2014

      Decision that HIPAA regulated entities are subject to FTC enforcement forces medical laboratory company to ‘wind down'
      Privacy Alert | January 31, 2014

      President Obama announces "new approach" to government surveillance tactics to balance privacy rights and national security
      Privacy Alert | January 21, 2014

      2014 Legal Snapshot
      January 16, 2014

      Senator Leahy introduces Personal Data Privacy and Security Act once again, calling for universal data security standards
      Privacy Alert | January 16, 2014

      NY State's highest court finds health care clinic is not liable for nurse's disclosure of patient information
      Health Alert | January 13, 2014

      Court of appeal limits liability theories under California's "Shine the Light" data privacy act
      Retail Industry Alert | December 31, 2013

      OIG issues Final Rule for safe harbor standards for EHR systems incentives
      Health Information Technology Alert | December 26, 2013

      Coming January 1, 2014: Amendments to California breach notification and privacy laws—what you need to know
      Privacy Alert | December 12, 2013

      Chief Justice questions cy pres remedies
      Class Action Alert | November 7, 2013

      Webinar Recording: TCPA vs. your customer communications: Serious changes coming for promotional texts and telemarketing
      Originally recorded October 8, 2013 | October 16, 2013

      TCPA: Your last minute questions answered
      Privacy Alert | October 16, 2013

      Our Top Five Riskiest Data Security Activities
      October 8, 2013

      Federal Regulatory Agencies Issue Financial Abuse of Elders Guidance
      Regulated Financial Institutions Alert | October 7, 2013

      Attention all businesses that market by phone, text or fax:
      New FCC rules are set to go into effect October 16 and penalties for noncompliance are severe. Are you ready?

      Privacy Alert | September 25, 2013

      Webinar Recording: Are you keeping your client's health information secure? HIPAA Compliance 101 for professional advisors
      Originally recorded September 12, 2013 | September 19, 2013

      FTC files first complaint against an "Internet of Things" marketer for failure to protect consumers' privacy
      Privacy Alert | September 9, 2013

      FTC files administrative complaint against medical laboratory for data breach of 10,000 consumers' personal and medical information
      Privacy Alert | August 30, 2013

      Big data companies beware: the FTC plans to boost enforcement in your industry
      Privacy Alert | August 29, 2013

      Jury awards $1.4 million verdict to a Walgreen Co. customer for privacy violation
      Privacy Alert | August 2, 2013

      Diving into E-Data, Second Circuit provides guidance regarding searches of computers
      Government Investigations & White Collar Defense Alert | July 22, 2013

      Wellpoint Inc. settles with OCR for $1.7 million for HIPAA violations
      HIPAA Alert | July 16, 2013

      Webinar Recording: Are you keeping your client's health information secure? HIPAA Compliance 101 for professional advisors
      Originally recorded July 10, 2013 | July 15, 2013

      The COPPA amended Rule goes into effect TODAY: Are you ready to comply?
      Privacy Alert | July 1, 2013

      Webinar Recording: Your play date with the Children's Online Privacy Protection Act: What to do now to comply by July 1
      Originally recorded June 20, 2013 | June 26, 2013

      California medical center settles HIPAA violation for $275,000
      HIPAA Law Alert | June 19, 2013

      FDA asks medical device industry to identify and mitigate cyberattack risks
      Pharmaceutical, Medical Device & Life Sciences Alert | June 18, 2013

      OCR settles another breach case for $400,000 for violations of the Security Rule
      HIPAA Law Alert | May 24, 2013

      Webinar Recording: Mobile Apps Special Alert
      Originally recorded May 9, 2013 | May 16, 2013

      Webinar Recording: What the HIPAA Omnibus Rule means for you—Your questions answered
      Originally recorded March 11, 2013 | March 15, 2013

      Google settles for $7 million with 38 states over gathering personal data from unsecure WiFi networks
      Privacy Alert | March 14, 2013

      FTC settles with mobile device manufacturer for failure to secure & protect consumers' personal data
      Privacy Alert | March 7, 2013

      The Use of Mobile Technology in the Practice of Medicine: Compliance Tips
      February 14, 2013

      Webinar Recording: It's here and it's mandatory: The HIPAA Omnibus Rule
      Originally recorded February 5, 2013 | February 13, 2013

      Federal banking regulators issue proposed guidance and seek comments on use of social media by banks, credit unions, and savings associations
      Privacy Alert | February 11, 2013

      FTC issues privacy and security guidance for mobile apps and cracks down on enforcement
      Privacy Alert | February 5, 2013

      FTC settles with cord blood bank for lax privacy practices and data breach
      Privacy Alert | January 31, 2013

      HHS announces sweeping changes to the HIPAA Privacy and Security Rules in the final HIPAA Omnibus Rule
      HIPAA Law Alert | January 23, 2013

      FTC releases amendments to strengthen the Children's Online Privacy Protection Act and increase parental control over access to children's personal information
      Privacy Alert | January 15, 2013

      NLRB finds online discussion between non-union employees "protected activity"
      Employment Law Alert | January 3, 2013

      U.S. Restrictions on Commercial Social Networking
      November 28, 2012

      California attorney general warns mobile application developers of non-compliance with CalOPPA
      Privacy Alert | November 6, 2012

      New York adds new restrictions on the use of social security numbers
      Employment Law Alert | October 26, 2012

      FTC seeking comments on additional proposed revisions to Children's Online Privacy Protection Rule
      Privacy Alert | August 8, 2012

      First Circuit faults bank for "one-size-fits-all" approach to cyber security measures
      Banking and Financial Services Litigation Alert | August 1, 2012

      . . . Hide Thought Leadership. . .

      Press

      Events

      Get Your Head in the Clouds: Practical Considerations for Using Internet-based Software and Data Storage
      May 6, 2015 | Buffalo, NY

      Get Your Head in the Clouds: Practical Considerations for Using Internet-based Software and Data Storage
      May 5, 2015 | Rochester, NY

      Data Security: Issues Wastewater Treatment Plants Need to Consider
      February 2, 2015

      . . . View all . . .

      HIPAA Privacy and Security Rules Apply to YOU! Are You complying?
      January 29, 2015

      EVENT POSTPONED
      A Conversation with LabMD's CEO: Its case against the FTC

      January 27, 2015 | Boston, MA

      Data Privacy & Security Roundtable
      January 21, 2015 | Rochester, NY

      Addressing Additional Risk from the "Internet of Things": Lessons from the Health Care Sector
      January 13, 2015

      Workplace preparedness: Is your organization ready?
      December 16, 2014 | Boston, MA

      Re-imagining Wellness and Behavioral Health and Disability Challenges in the Workplace
      December 5, 2014

      Cybersecurity and Data Protection Legal Summit
      December 2, 2014

      Nixon Peabody's Semi-Annual CLE Program
      November 21, 2014 | Rochester, NY

      2014 MIT Sloan CFO Summit: Shh—Dangers and demands of digital data
      November 20, 2014

      Edison Electric Institute Cybersecurity Networking Reception and Law Conference: Discussions on Cyber Insurance
      October 24, 2014

      Miller's Court: Privacy in the Age of the Internet
      October 18, 2014

      Protecting Your Reputation Before, During and After a Crisis
      October 15, 2014 | Boston, MA

      Webinar: Tech Talk 101: are you fluent in the language of data security?
      October 8, 2014

      Code the Deal
      September 19, 2014 | New York, NY

      Risky business: Integrating privacy and security from the start
      August 21, 2014

      Emerging Trends in Information Privacy and Security
      August 6, 2014

      Environmental Laboratories and Data Security—How to Protect Your Company, Secure Your Results & Still Get Your Results Out
      July 22, 2014

      Responding to a potential HIPAA security breach: Practical tips from real breaches
      July 22, 2014

      Webinar: Cybersecurity, Data Protection & Privacy Risks in the Financial Industry
      July 9, 2014 | Providence, RI

      Webinar: Cloud Computing: are you trading compliance for convenience?
      July 8, 2014

      MA Bar Association 2014 Annual Health Law Conference: Legal Ethics & Privacy
      June 19, 2014

      Data Privacy & Security Roundtable
      June 17, 2014 | Rochester, NY

      NetDiligence® Cyber Risk & Privacy Liability Forum: Big Data and wrongful collection
      June 13, 2014

      Data Privacy & Security 101: Integrating privacy and security from the start
      June 12, 2014

      IoT Olympiad
      May 2, 2014 | Boston, MA

      Privacy and Security 101: Protecting high-risk data at private schools
      April 3, 2014 | Providence, RI

      Minding the Store: Legal Roundtable for Retailers
      March 27, 2014 | San Francisco, CA

      A Privacy Law Primer: What Every Attorney, Compliance and Security Officer Should Know
      February 7, 2014

      BYOD: The Evolving Risks (and Solutions) of “Bring Your Own Device” Programs
      January 30, 2014

      Responding to a potential HIPAA security breach: Practical tips from real breaches
      January 22, 2014

      Critical Issues in Information Security & Data Privacy
      January 14, 2014 | Boston, MA

      The good, the bad and the ugly of TCPA compliance
      December 10, 2013

      FTC's first "Internet of Things" settlement: key takeaways from the settlement and strategies for developing a compliance program
      December 9, 2013

      Medical Records Law
      November 8, 2013

      Do Ethics Exist in the Cloud? Practical considerations for lawyers and professionals in the mobile age
      November 7, 2013

      Critical Issues in Information Security & Data Privacy
      November 5, 2013 | Providence, RI

      Data privacy and security challenges for drug & device manufacturers: Understanding the industry's key challenges, dissecting the most impactful regulations and avoiding common pitfalls for risk exposure
      October 21, 2013

      Webinar: TCPA vs. your customer communications: Serious changes coming for promotional texts and telemarketing
      October 8, 2013

      Securing Global Trade: What your company can proactively do today
      October 3, 2013

      Cyber liability is risky business: Know your exposure in the health care industry
      September 26, 2013

      Webinar: Are you keeping your client's health information secure? HIPAA Compliance 101 for professional advisors
      September 12, 2013

      Hacking, fraud, cybercrime, and theft: Is your data an easy target?
      September 10, 2013 | New York, NY

      Telemedicine 101: A Legal and Professional Perspective
      July 22, 2013

      Webinar: Legal privacy primer: First steps in a career
      July 11, 2013

      Webinar: Are you keeping your client's health information secure? HIPAA Compliance 101 for professional advisors
      July 10, 2013

      Webinar: Your play date with the Children's Online Privacy Protection Act: What to do now to comply by July 1
      June 20, 2013

      Cyber Threats & Cyber Realities: An institute on the legal and policy landscape of cyber risks—foreign and domestic
      June 17, 2013

      ACI 3rd Annual Health Care Privacy and Security Forum
      May 22, 2013 | New York, NY

      Webinar: Mobile Apps Special Alert
      May 9, 2013

      PLUS Medical PL Symposium
      April 11, 2013 | Chicago, IL

      What the HIPAA Omnibus Rule means for you: Your questions answered
      March 28, 2013 | Boston, MA

      Annual Rhode Island CLE Seminar
      March 19, 2013 | Providence, RI

      Webinar: What the HIPAA Omnibus Rule means for you—Your questions answered
      March 11, 2013 | Manchester, NH

      What the HIPAA Omnibus Rule means for you: Your questions answered
      February 27, 2013 | Providence, RI

      Webinar: It's here and it's mandatory: The HIPAA Omnibus Rule
      February 5, 2013 | Jericho, NY

      Health Care IT Security and Governance in the Post-HITECH Age
      January 29, 2013 | New York, NY

      HIPAA Breaches—Lessons Learned
      Are you Audit Ready? Survival Strategies and 22 Steps to Audit Readiness

      January 22, 2013 | New York, NY

      ACI Health Care Privacy and Security Forum
      December 7, 2012

      PKF North America Summit: Cyber Risks
      November 12, 2012 | San Francisco, CA

      Medical Records Law Conference
      November 8, 2012 | Providence, RI

      Mental Healthcare America (MHCA) Fall Conference
      November 1, 2012

      Devices and Mobile Technology: A New Challenge for Maintaining Data Privacy and Security
      October 10, 2012 | Rochester, NY

      Data Privacy & Security Issues with Mobile Technology: Practical Strategies for In-House Counsel to Reduce Risks
      October 4, 2012 | San Francisco, CA

      Data Privacy & Security Issues with Mobile Technology: Practical Strategies for In-House Counsel to Reduce Risks
      September 25, 2012 | Boston, MA

      Responding to a potential HIPAA security breach: Practical tips from real breaches
      September 19, 2012

      . . . Hide Events . . .
      Privacy & Data Protection