Blog

Security, Privacy and the Law

Security and privacy issues encountered by businesses often require immediate and discreet solutions. We cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Security, Privacy and the Law
When AI Becomes the Hacker: What the OpenAI–Hugging Face Breach Means for Your Organization
Blog July 23, 2026
The disclosure that OpenAI's own AI models autonomously broke out of a sandboxed testing environment and hacked into Hugging Face's production infrastructure is, without exaggeration or hyperbole, a watershed moment for anyone advising on data privacy and cybersecurity…
Trump’s New AI Frontier: The Executive Order Regulating Frontier AI Models
Blog June 29, 2026
On June 2, 2026, President Trump signed an executive order titled “Promoting Advanced Artificial Intelligence Innovation and Security.”…
Robotics and Health Information - Privacy and Security Issues You Need to Know
Blog March 05, 2026
On March 5, 2026, Colin Zick presented to the MassRobotics Healthcare Catalyst Program on the topic, "Robotics and Health Information: Navigating Clinical Deployments in Light of Current Trends in Health Information Privacy and Security."…
California Finalizes New CCPA Regulations: What Businesses Need to Know
Blog August 29, 2025
California continues to lead the way in data privacy standards as the latest regulatory updates from the California Privacy Protection Agency (“CPPA”) mark a significant step forward in safeguarding individual rights and data security…
Bipartisan Effort By State AGs Pushes Tech Companies to Take Action Against Deepfake Imagery
Blog August 28, 2025
On August 26, a bipartisan group of 47 state attorneys general issued letters calling on major tech companies to increase their efforts to stop the spread of computer-generated and nonconsensual “deepfake” images, particularly including deepfake pornography…
U.S. House Report Addresses AI Concerns, Including Privacy and Data Security
Blog December 31, 2024
On December 17, 2024, just before leaving town until the new session of Congress, the U.S. House of Representatives’ Bipartisan Artificial Intelligence Task Force issued a “Report on Artificial Intelligence," which addresses (among other things) several key aspects of privacy and data security concerning artificial intelligence…
Post-Election Privacy & Cybersecurity Law Developments to Watch
Blog November 11, 2024
What should privacy and cybersecurity practitioners and specialists consider after the 2025 inauguration? There are a few notable issues that may shape how businesses think about their privacy and cybersecurity programs…
The Health Sector Cybersecurity Coordination Center’s September 19 Threat Briefing on Healthcare Technology Security
Blog September 19, 2024
In a joint September 19, 2024 presentation, the Department of Health and Human Services’ Office of Technology and the Health Sector Cybersecurity Coordination Center explored key concepts and definitions, examined various technologies, electronic records systems, medical devices, and AI, and discussed defense and mitigation strategies that sophisticated compliance personnel must consider…
The Ibero-American AI Framework – General Recommendations
Blog August 27, 2024
Partner Chris Hart authored the article, “The Ibero-American AI Framework – General Recommendations,” published recently in DataGuidance…
1 of 2

ABOUT

The Foley Hoag Security, Privacy and the Law Blog focuses on the security and privacy issues encountered by businesses that often require immediate and discreet solutions. Here we cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Our lawyers assist clients with questions on how to legally and ethically investigate abusive e-mail, take down infringing Web sites, maintain surveillance of company facilities and information systems, and remediate breaches of security. We work with clients to ensure the legality and success of existing security policies and protocols and help them develop new programs when necessary. Our lawyers have managed unexpected crises ranging from surprise inspections by government investigators to obtaining emergency court orders needed to secure stolen company computers from rogue insiders.

Blog Authors