Winston & Strawn

Site Search

Professionals (264)
Capabilities (65)
Experience (54)
Insights & News (1,918)
Other Results (66)

Professionals 264 results

T. Reed Stephens

Partner

Washington, DC

+1 202-282-5795

vCard

Partner

Washington, DC

Alessandra Swanson

Partner

Chicago

+1 312-558-7435

vCard

Partner

Chicago

Justin Levy

Partner

New York

+1 212-294-6677

vCard

Partner

New York

View All Professionals

Capabilities 65 results

Industry

Healthcare

Practice Area

Privacy & Data Security

Winston takes a strategic approach to privacy and data security, integrating our extensive capabilities across practices to provide our clients with cutting-edge privacy and data security counseling, crisis management, security incident investigation and notification management, defense of data security class action litigation and regulatory inquiries, and international data protection. Our Global Privacy & Data Security Practice features a core team of privacy professionals and is bolstered by more than 40 attorneys from a variety of other disciplines firmwide. Our team combines compliance counselors, transactional lawyers, former government regulators and federal prosecutors, seasoned investigators, and experienced litigators. Few firms can rival our in-depth, sophisticated, and integrated experience in this area....Read more

Practice Area

Privacy: Regulated Personal Information (RPI)

Winston’s Regulated Personal Information (RPI) Practice offers seamlessly integrated counseling and litigation services to companies looking for practical and solution-oriented assistance navigating the compliance, regulatory, and private class action enforcement risks presented by the emerging patchwork of complex (and often conflicting) privacy laws in the United States and beyond....Read more

Experience 54 results

Experience

November 26, 2025

Winston & Strawn Represented CFS Brands in its Acquisition of Cornerstone Foodservice Group

Winston represented CFS Brands, a portfolio company of TJC, in its acquisition of Cornerstone Foodservice Group, a global leader in foodservice equipment serving both front- and back-of-house applications through a portfolio of established, innovative brands. ...Read more

Experience

November 15, 2024

Winston Represented Revelstoke Capital Partners in Acquisition of NKMD MGMT, LLC

Winston represented Revelstoke Capital Partners, a healthcare-focused private equity firm, in the acquisition of NKMD Mgmt, LLC, a provider of services including fillers, toxins, and other aesthetics treatments in over 20 locations across California, Arizona and Nevada. As the medical aesthetics industry continues to grow, this partnership between Revelstoke and NKMD will help build an industry leader with a strong commitment to clinical quality, safety, and patient experience....Read more

Experience

November 13, 2024

Winston advised Astorg on the acquisition of a majority stake in Redslim, in partnership with its founders and management team

Winston and Strawn Paris represented Astorg, a leading Pan-European private equity firm in connection with the signing of a binding agreement to acquire a majority stake in Redslim (the “Company”) from its Founders, Eric Bensimon, Alberto Alcaniz, Soren Altmann and Patric Mezei (the “Founders”), who will re-invest significantly in the business. Redslim provides data management services, leveraging a proprietary technology platform, and focusing on Consumer-Packaged Goods (CPG) and Consumer Healthcare (CHC) segments. Through this partnership, Astorg will support the Company’s growth and international expansion, collaborating closely with the Founders and the management team. ...Read more

View All Experience

Insights & News 1,918 results

Sponsorship

March 22, 2026

Winston & Strawn Sponsors 38th Annual Roth Conference

Winston & Strawn is proud to sponsor the 38th Annual Roth Conference. This year, the program will feature one-on-one and small group meetings, analyst-selected fireside chats, industry keynotes, and panel discussions. ...Read more

Investigations, Enforcement, & Compliance Alerts

February 18, 2026

3 Min Read

Beyond the CMMC: New Cybersecurity Assessments for Government Contractors

The General Services Administration (GSA) recently announced changes to procedural guidance that may affect contractor eligibility for GSA contracts. GSA issued the IT Security Procedural Guide: Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process CIO-IT Security-21-112, which set out a cybersecurity framework for protecting CUI that is similar to the Cybersecurity Maturity Model Certification (CMMC) for DoD contracts.

Benefits Blast

February 3, 2026

3 Min Read

Group Health Plans Must Update HIPAA Notices by February 16 to Address New SUD Privacy Rules

Covered entities, including group health plans, must update and distribute their Health Insurance Portability and Accountability Act of 1996 (HIPAA) Notice of Privacy Practices (NPP) by February 16, 2026, to comply with new rules for handling substance use disorder ) records.

View All Insights & News

Other Results 66 results

Site Content

What Is Healthcare Privacy Law?

Today, healthcare privacy law is driven by the 1996 Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. This federal privacy rule establishes protections for specific patient health information. Healthcare plans, clearinghouses, and providers are subject to the law....Read more

Site Content

What Is Healthcare Security Law?

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) established U.S. regulations to protect the privacy and security of individual health information. The healthcare security law creates these specific protections through both the HIPAA Privacy Rule and the HIPAA Security Rule. The Privacy Rule has set national standards for the protection of certain types of health information. The Security Rule established security standards for protecting consumers’ health information that is stored or transferred electronically. The healthcare Security Rule outlines the operational safeguards that organizations must implement to keep protected electronic health information secure....Read more

Site Content