As recently reported in Mintz Levin’s Privacy and Security Matters Blog, the California Attorney General has taken steps to reorganize and centralize privacy and security law enforcement functions to support the enforcement of California’s privacy and data security laws, which are among the strictest in the nation.

In our sister blog, Privacy and Security Matters, Cynthia Larose and Brian Lam discuss a new California privacy law passed on June 28, 2018 ...

Legislation is starting to move off California Governor Gavin Newsom's desk. As we reported in our summary of privacy laws passed out of the 2021 California legislature...

It’s been a while coming, but a mandatory privacy training rule for federal contractors could make it in the Federal Register by the end of the year.

We previously reported here that CNA filed a lawsuit against its insured Cottage Health System seeking reimbursement of amounts that it previously paid under Cottage's cyber liability insurance policy.

According to Cynthia Larose, Chair of our Privacy & Security Practice, mobile app developers have some unique challenges when it comes to preparation and implementation of privacy policies.

Our colleagues over at the Mintz Health Law Policy Matters blog have posted a reminder about the approaching annual HITECH data breach reporting deadline.

A commentary on the newly-published HIPAA Omnibus rule.

Employers could have significant liability for failure to provide notice to employees and/or state regulators.

The UCLA Health System has notified more than 16,000 patients of the theft of their PHI during a home invasion of a former employee.

Sources informed the Wall Street Journal that a definitive MasterCard settlement could be announced as soon as this week.

In less than 10 days, the European Union will begin enforcing its General Data Protection Regulation (GDPR) which will apply to any company that collects, processes, or uses EU-origin...

As much as we love to write about HIPAA on the Health Law and Policy Matters blog, HIPAA is only half of any privacy law analysis.

Following up on our recent post on the Adobe data breach, I had the opportunity to speak with Colin O’Keefe of LXBN on the subject. In the brief video interview, I explain the details of the data breach and also share my thoughts on potential litigation we may see as a result.

To bring you up-to-date on what security professionals see as threats to the enterprise, our friends at Threatpost have produced an interesting video that can be viewed here.

Kudos to Shirley Leung of The Boston Globe for concisely recounting the past 15 years of Boston waterfront planning, where it has and hasn't gotten us...

Integrating Diversity In Client Relationships

At a Boston College cybersecurity conference sponsored by Mintz, FBI Director Christopher Wray said that agents this summer thwarted a planned attack on Boston Children's Hospital.

As we previously reported, on September 19, 2025, the California legislature sent SB 7, the "No Robo Bosses Act" to Governor Newsom for signature. On October 13, 2025, Governor Newsom vetoed the Act, explaining in a press...

There is a glut of information out there regarding privacy and cybersecurity these days.