A recent Massachusetts case shows that even prisoners have a right to privacy in their medical records. In this case, "Alexander v. Clark", Suffolk Superior Court, Civil Action No. 0905456-H 28 Mass. L. Rptr. No. 14, 291 (May 30, 2011), the court sided with the claim of a prisoner that her health information had been wrongfully disclosed.

BNA has published a good article on how an employer can protect its confidential information from being taken by a departing employee to a competitor.

Fourteen thousand, eight hundred and fifty-nine reviews! Four and a half stars! Who can resist these authentic

The Boston Bar Association's inaugural Privacy and Cybersecurity Conference will be held on May 24.

Foley Hoag partner and Co-Chair of the firm's Privacy and Data Security Practice, offers his insights

Colin Zick, co-chair of Foley Hoag's Health Care Practice and Chair of the Privacy and Data Security Practice, spoke with Bloomberg Law's Ayanna Alexander...

While the entire text is too lengthy and dynamic to go into in any detail here, one important theme bears mentioning: from a business perspective, the issue of data security boils down to a risk management issue.

On May 25, 2016, partners Catherine Muyl, Colin Zick and Daniel Schimmel participated in a panel discussion on how companies can transfer personal data and remain compliant.

Today, the Article 29 Working Party (the advisory body on data protection and privacy composed of representatives from the national data protection authorities of all EU Member States

New Mexico is one of the few remaining states to not have a law requiring companies to notify consumers when their information is part of a data breach. This, however, might change very soon.

A recent issue of the Journal of the American Medical Association takes on the issue of physician medical identify theft; here's the abstract.

Partner Colin Zick recently presented at the MaHIMA Dot Wagg Legislative Seminar discussing recent HIPAA violations, how GDPR will impact US companies and the Trusted Exchange Framework.

A new Massachusetts law toughens reporting requirements for companies and organizations hit by data security breaches and mandates requires free credit monitoring to affected consumers

It was a pleasure to be on a panel with members of the Massachusetts Office of the Attorney General last week at the Massachusetts Medical Society to talk about how physicians can protect health information in our presentation entitled: "Protecting Health Information: Health Data Security Training," We covered the latest in federal law (HIPAA, HITECH) and Massachusetts law.

Colin Zick, a partner at law firm Foley Hoag, says the guidance is too general and that companies will have to think hard when assessing what information to disclose.

Data privacy and security have never been more top of mind for business than they are right now.

Held at the Courtyard Marriott in Boston on May 24 , this full-day conference will cover a wide range of topics from data breach response and litigation to compliance and transactional issues.

Active Cyber Defense, or ACD, is a broad category encompassing different kinds of actions that organizations can take to defend against breaches and cyberattacks.

This guidance might also proactively reassure the millions of patients who have pacemakers that are not subject to the advisory, a model for communication that may serve the public well going forward."

Data breaches have become an all-consuming topic of late. Stories about data theft dominate political headlines, boardroom discussions and family meetings around the dinner table.