Blog

Security, Privacy and the Law

Security and privacy issues encountered by businesses often require immediate and discreet solutions. We cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Security, Privacy and the Law
Rising Cyberattacks on U.S. Water Infrastructure: Federal Guidance and Next Steps for Operators
Blog August 17, 2026
Recent guidance issued by Federal agencies warns that malicious cyber actors are targeting internet-facing operational technology (“OT”) used by water and wastewater utilities, particularly PLCs…
When AI Becomes the Hacker: What the OpenAI–Hugging Face Breach Means for Your Organization
Blog July 23, 2026
The disclosure that OpenAI's own AI models autonomously broke out of a sandboxed testing environment and hacked into Hugging Face's production infrastructure is, without exaggeration or hyperbole, a watershed moment for anyone advising on data privacy and cybersecurity…
The White House's "Gold Eagle" Cybersecurity Initiative: More Branding Than Breakthrough?
Blog July 20, 2026
On July 14, the White House announced the launch of "Gold Eagle," a new federal government-industry clearinghouse for coordinating cybersecurity vulnerability detection and remediation across critical infrastructure…
The Amended Children’s Online Privacy Protection Act (COPPA) Regulations:  What Your Business Needs to Know
Blog July 06, 2026
This change has been a long time in the making.  On April 22, 2025, the Federal Trade Commission (FTC) published final amendments to COPPA, marking the first major change to COPPA since 2013…
Trump’s New AI Frontier: The Executive Order Regulating Frontier AI Models
Blog June 29, 2026
On June 2, 2026, President Trump signed an executive order titled “Promoting Advanced Artificial Intelligence Innovation and Security.”…
One Step Closer to a Massachusetts Data Privacy Law:  Comparing the Current House and Senate Bills
Blog June 17, 2026
Massachusetts lawmakers are working to pass a long-awaited comprehensive data privacy law in the current legislative session…
Why AI Is Forcing Privacy and Security Teams Back Together — And What That Means for Your Organization
Blog May 14, 2026
One of the most consequential structural decisions facing organizations today is whether to continue operating privacy and security as separate functions or to begin integrating them in anticipation of the AI-driven regulatory and operational landscape that is rapidly taking shape…
Business Email Compromises: Current Legal Trends and Key Strategies
Blog April 03, 2026
Businesses have for years suffered from a sophisticated, targeted cybercrime that exploits trust, human relationships, and our reliance on digital communication: the business email compromise (BEC)…
Robotics and Health Information - Privacy and Security Issues You Need to Know
Blog March 05, 2026
On March 5, 2026, Colin Zick presented to the MassRobotics Healthcare Catalyst Program on the topic, "Robotics and Health Information: Navigating Clinical Deployments in Light of Current Trends in Health Information Privacy and Security."…
1 of 30

ABOUT

The Foley Hoag Security, Privacy and the Law Blog focuses on the security and privacy issues encountered by businesses that often require immediate and discreet solutions. Here we cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Our lawyers assist clients with questions on how to legally and ethically investigate abusive e-mail, take down infringing Web sites, maintain surveillance of company facilities and information systems, and remediate breaches of security. We work with clients to ensure the legality and success of existing security policies and protocols and help them develop new programs when necessary. Our lawyers have managed unexpected crises ranging from surprise inspections by government investigators to obtaining emergency court orders needed to secure stolen company computers from rogue insiders.

Blog Authors