Blog

Security, Privacy and the Law

Security and privacy issues encountered by businesses often require immediate and discreet solutions. We cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Security, Privacy and the Law
When AI Becomes the Hacker: What the OpenAI–Hugging Face Breach Means for Your Organization
Blog July 23, 2026
The disclosure that OpenAI's own AI models autonomously broke out of a sandboxed testing environment and hacked into Hugging Face's production infrastructure is, without exaggeration or hyperbole, a watershed moment for anyone advising on data privacy and cybersecurity…
Beyond the Privacy Policy:  Toward Effective Data Governance
Blog August 27, 2019
Shifting how businesses think about privacy. Lets stop thinking about privacy policies alone, and lets start thinking about data governance plans. For the ordinary business trying to generate revenue and minimize risk, having to think about data privacy can be both a nuisance and a headache.  Generally, its easy to want to think about privacy as something that can be dealt with using minimal resources—by updating a template privacy policy and posting it on a website…
Cyber Insurance: Prevalent But By No Means Ubiquitous
Blog June 29, 2017
A recent survey from the credit score company FICO has some interesting numbers on the prevalence of cyber insurance in the US. 50% of US companies have no cyber insurance. 74% of US healthcare companies have no cyber insurance. 27% of US companies say they have no future plans to acquire cyber insurance. Today, you can expect the more traditional types of business insurance…

ABOUT

The Foley Hoag Security, Privacy and the Law Blog focuses on the security and privacy issues encountered by businesses that often require immediate and discreet solutions. Here we cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Our lawyers assist clients with questions on how to legally and ethically investigate abusive e-mail, take down infringing Web sites, maintain surveillance of company facilities and information systems, and remediate breaches of security. We work with clients to ensure the legality and success of existing security policies and protocols and help them develop new programs when necessary. Our lawyers have managed unexpected crises ranging from surprise inspections by government investigators to obtaining emergency court orders needed to secure stolen company computers from rogue insiders.

Blog Authors