REGULATORY & ADMINISTRATIVE LAW

Data Security & Information Privacy

Every business collects, stores and manages personal information. Some businesses handle particularly sensitive information, such as health care or financial information. Whether digital or in paper format, companies are responsible for managing and protecting sensitive information, and that’s no small challenge.

REGULATORY & ADMINISTRATIVE LAW PRACTICES

Our work includes:

anticipating developments that will impact businesses
creating and designing systems and software to maintain data security
developing, reviewing and ensuring compliance with the necessary plans, policies, agreements and terms of service to comply with state and federal data security laws and regulations, including tough new rules in California and Massachusetts
determining when security threats rise to the level of actionable security breaches
counseling for and assisting with breach response activities
ensuring compliance with international data security and privacy requirements, including the European Data Protection Regulation (GDPR) and the European Privacy Regulations

RESULTS

Proof positive.

Represent companies in developing and refining WISPs and related policies such as incident response plans, record retention polices, emergency recovery plans, website terms and conditions, and website privacy policies, including for a large retailer with operations in New England, Metro New York and Mid-Atlantic states.
Review HIPAA/HITECH compliance issues for a fast-growing medical software company.
Assist health care clients with HIPAA/HITECH compliance, including preparing internal policies, business associate agreements, and license and service agreements.
Advise corporate clients on data security issues raised in both buyer- and seller-side mergers and acquisition transactions.
Counsel companies in evaluating potential security breaches and required response activities and disclosures.
Counseled a cloud security company in assisting U.S. and European clients on privacy compliance matters and in licensing matters.
Counseled companies on revising terms and conditions, privacy policies and other documents to achieve and maintain compliance with GDPR and other international data regulations.