- Loyola University School of Law, J.D.
- Newcomb College of Tulane University, B.A., with honors in American Studies
- Rhode Island
- U.S. District Court, District of Rhode Island
- U.S. District Court, District of Massachusetts
- U.S. Court of Appeals, First Circuit
- U.S. Court of Appeals, Fifth Circuit
- U.S. Supreme Court
Linn is recognized by Chambers USA 2012 and 2013 as a Leader in the Field of Privacy Law. She is a past recipient of the Rhode Island Department of Health Founder’s Award, the Rhode Island Attorney General Justice Award, and the Rhode Island Department of Health Award for Excellence in Public Health Promotion.
Linn serves as general counsel of the Rhode Island Quality Institute. She is also president of the Foundation for Rhode Island Day Schools and is on the boards of Roger Williams University, Roger Williams University Law School and the Rhode Island Business Group on Health. Linn also serves on the advisory board of Women Entrepreneurs in Science and Technology (WEST) and the New England Network for Teaching Entrepreneurship (NFTE).
Linn is a member of the American, Rhode Island, and Rhode Island Women’s bar associations; Women’s Health Council of Rhode Island; International Association of Privacy Professionals; Rhode Island Health Care Reform Commission; Association of Pharmacy Lawyers; American Health Lawyers Association; and Defense Counsel of Rhode Island. She is also a member of the WBL Network—an exclusive association formed by the Women Business Leaders of the U.S. Health Care Industry Foundation, Women in the Boardroom, and the Quorum Initiative.
LINN FOSTER FREEDMAN
Linn Freedman practices in data privacy and security law, and complex litigation. She is leader of the firm’s Privacy & Data Protection group and chair of the firm’s HIPAA Compliance team. Prior to joining the firm, Linn was an assistant attorney general and deputy chief of the Civil Division of the Attorney General’s Office for the State of Rhode Island. In this role, she was responsible for the supervision of the regulatory activities of the department and four regulatory units: Public Utilities, Insurance Advocacy, Charitable Trusts and the Health Care Advocate, including the health care conversions team. She currently serves as General Counsel to the Rhode Island Quality Institute.
What do you focus on?
I focus on compliance with all state and federal privacy and security laws and regulations, as well as emergency data breach response and mitigation. I advise clients on state and federal data privacy and security investigations and data breaches. I help companies and organizations adopt a risk management approach to precisely frame the purpose and means for the collection, maintenance and transfer of high risk data throughout their organization. I work with them to identify high risk data—both paper and electronic—and implement measures to protect it and help them develop defensible—and reasonable—approaches to comply with constantly evolving regulatory requirements and the risk of a data breach.
In recent months I have helped clients in the following areas:
- Data mapping and development of enterprise wide Privacy & Security Plans
- Developing approaches to comply with various U.S. and international privacy requirements, including safe harbor applications
- Compliance with industry-specific privacy and data protection regulations, including TCPA, COPPA, FCRA, CalOPPA and the Gramm Leach Bliley Act
- Written Information Security Plans (WISPs) in compliance with the Massachusetts data regulations
- HIPAA Compliance Programs and employee awareness training
- Patient Portals
- Data Use and Sharing Agreements for Health Information Exchanges
- Software and Cloud Vendor Agreements
- Data breach response, remediation, coordination and litigation
- Multiple investigations by the U.S. Office for Civil Rights
- Privacy and security investigations by state regulatory authorities
- Guidance regarding the privacy and data protection implications associated with the deployment of mobile communication and data storage technologies
- Guidance regarding mobile applications and location based services
- Website privacy policies and terms and conditions of use
- Social media policies, practices and procedures
What do you see on the horizon?
Business opportunities that exist with new technologies like mobile applications, big data mining and social networking, and the amount of data collected and transmitted, are growing at a rapid and exciting pace. I see increased tension between these opportunities and consumers and regulators attempting to limit the use of data.
- Understanding the New Rule for Patient Access to Lab Results
Health Data Management | February 12, 2014
Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia discuss the new Health and Human Services rule, which allows patients and their personal representatives access to lab test reports and results from laboratories.
- FTC Continues To Push Privacy Breach Enforcement
Law360 | January 17, 2014
Partner and leader of the firm’s Privacy & Data Protection practice Linn Freedman and Providence Government Investigations & White Collar Defense associate Kathryn Sylvia authored this column discussing efforts to ensure that adequate privacy and security practices and procedures are in place to protect employee and consumer data as the Federal Trade Commission’s enforcement initiatives increase.
- LabMD Unleashes Trump Card in FTC Data Security Fight
Law360 | November 22, 2013
Partner and leader of the firm’s Privacy & Data Protection group Linn Freedman discusses the implications of the Federal Trade Commission’s data breach claims against LabMD Inc.