Blog

Security, Privacy and the Law

Security and privacy issues encountered by businesses often require immediate and discreet solutions. We cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Security, Privacy and the Law
Rising Cyberattacks on U.S. Water Infrastructure: Federal Guidance and Next Steps for Operators
Blog August 17, 2026
Recent guidance issued by Federal agencies warns that malicious cyber actors are targeting internet-facing operational technology (“OT”) used by water and wastewater utilities, particularly PLCs…
When AI Becomes the Hacker: What the OpenAI–Hugging Face Breach Means for Your Organization
Blog July 23, 2026
The disclosure that OpenAI's own AI models autonomously broke out of a sandboxed testing environment and hacked into Hugging Face's production infrastructure is, without exaggeration or hyperbole, a watershed moment for anyone advising on data privacy and cybersecurity…
The Amended Children’s Online Privacy Protection Act (COPPA) Regulations:  What Your Business Needs to Know
Blog July 06, 2026
This change has been a long time in the making.  On April 22, 2025, the Federal Trade Commission (FTC) published final amendments to COPPA, marking the first major change to COPPA since 2013…
Trump’s New AI Frontier: The Executive Order Regulating Frontier AI Models
Blog June 29, 2026
On June 2, 2026, President Trump signed an executive order titled “Promoting Advanced Artificial Intelligence Innovation and Security.”…
Why AI Is Forcing Privacy and Security Teams Back Together — And What That Means for Your Organization
Blog May 14, 2026
One of the most consequential structural decisions facing organizations today is whether to continue operating privacy and security as separate functions or to begin integrating them in anticipation of the AI-driven regulatory and operational landscape that is rapidly taking shape…
Business Email Compromises: Current Legal Trends and Key Strategies
Blog April 03, 2026
Businesses have for years suffered from a sophisticated, targeted cybercrime that exploits trust, human relationships, and our reliance on digital communication: the business email compromise (BEC)…
42 C.F.R. Part 2 Civil Enforcement Is Here: What Substance Use Disorder Providers Need to Know
Blog February 17, 2026
February 16, 2026 marks a significant milestone for substance use disorder (SUD) treatment providers across the country…
The Supreme Court Enters the Discussion about Meta Pixel and Google Analytics:  How to Define What Is a “Consumer” Under the Video Privacy Protection Act?
Blog February 17, 2026
In January 2026, the U.S. Supreme Court granted certiorari in Salazar v. Paramount Glob., 133 F.4th 642 (6th Cir. 2025), to resolve a split among courts as to who qualifies as a “consumer” under the Video Privacy Protection Act…
Lessons on Protecting Your Company’s Crown Jewels – Do a Better Job than the Louvre Did Protecting Its Crown Jewels
Blog November 11, 2025
The Louvre is synonymous with cultural excellence. That’s what makes the recent heist of crown jewels—and the subsequent state audit—so jarring. This wasn’t a Hollywood caper. It was a case study in how predictable, preventable security failures accumulate over time when leadership choices systematically favor the visible over the vital…
1 of 6

ABOUT

The Foley Hoag Security, Privacy and the Law Blog focuses on the security and privacy issues encountered by businesses that often require immediate and discreet solutions. Here we cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Our lawyers assist clients with questions on how to legally and ethically investigate abusive e-mail, take down infringing Web sites, maintain surveillance of company facilities and information systems, and remediate breaches of security. We work with clients to ensure the legality and success of existing security policies and protocols and help them develop new programs when necessary. Our lawyers have managed unexpected crises ranging from surprise inspections by government investigators to obtaining emergency court orders needed to secure stolen company computers from rogue insiders.

Blog Authors