Winston & Strawn

Site Search

Professionals (8)
Capabilities (10)
Experience (0)
Insights & News (93)
Other Results (17)

Professionals 8 results

Alessandra Swanson

Partner

Chicago

+1 312-558-7435

vCard

Partner

Chicago

Joanna Kerpen

Partner

Washington, DC

+1 202-282-5145

vCard

Partner

Washington, DC

Amy Gordon

Partner

Chicago

+1 312-558-6390

vCard

Partner

Chicago

View All Professionals

Capabilities 10 results

Practice Area

Privacy & Data Security

Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area....Read more

Industry

Health Care

Industry

Development & Protection of AI Technologies

Our Intellectual Property (IP) and Privacy teams work closely together to counsel clients in building, protecting, and commercializing proprietary AI technologies and data; the use of third party or open source AI technologies and data; and the implications that these activities may have under privacy laws....Read more

Insights & News 93 results

News

August 4, 2025

3 Min Read

Key Takeaways from Winston’s Fifth Annual Health Care & Life Sciences Summit

Winston & Strawn was pleased to host its fifth annual Health Care & Life Sciences Summit. This year’s event brought together clients, colleagues, and industry leaders for an afternoon of insightful discussions, networking, and perspectives on the shifting dynamics across the health care and life sciences sector....Read more

Client Alert

March 28, 2025

3 Min Read

HHS Announces Major Restructuring and Workforce Reductions

On March 27, 2025, citing priorities to reduce agency budget costs and eliminate redundancy among sub-agencies, the U.S. Department of Health and Human Services (HHS) announced that it would be undergoing a significant restructuring, including cutting 20,000 jobs largely from public health agencies.

Benefits Blast

January 30, 2025

3 Min Read

Tobacco Surcharge Lawsuits Test Employee Wellness Programs

In the past few months, group health plans have experienced a surge of litigation challenging premium surcharges based on participants’ tobacco use.

View All Insights & News

Other Results 17 results

Law Glossary

What Is Health Care Privacy Law?

Today, health care privacy law is driven by the 1996 Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. This federal privacy rule establishes protections for specific patient health information. Health care plans, clearinghouses, and providers are subject to the law....Read more

Law Glossary

What Is Health Care Security Law?

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) established U.S. regulations to protect the privacy and security of individual health information. The health care security law creates these specific protections through both the HIPAA Privacy Rule and the HIPAA Security Rule. The Privacy Rule has set national standards for the protection of certain types of health information. The Security Rule established security standards for protecting consumers’ health information that is stored or transferred electronically. The health care Security Rule outlines the operational safeguards that organizations must implement to keep protected electronic health information secure....Read more

Law Glossary

What Is Data Breach and Data Security Law?

Within 48 U.S. states and the District of Columbia, data breach and data security laws require organizations and government agencies to provide notifications of security breaches when they involve personally identifiable information. Companies may also be required by state data breach laws to act to minimize the effects of a breach. The FTC can investigate companies that do not adhere to their stated privacy policies and do not have safeguards to protect customer data, but no broad federal law exists regarding breach notifications. However, these U.S. data security laws and government agency rules are enforced:...Read more