Health Privacy and Cybersecurity
Health Privacy and Cybersecurity
Whether we’re working to respond to a cyberattack or data breach, or helping develop privacy and security compliance programs, the Hogan Lovells team is ready. We can help you build innovative products, programs, and systems that allow you to collect, use, and process data in ways that best meet your needs.

Whether we're working to respond to a cyberattack or data breach, or helping develop privacy and security compliance programs, the Hogan Lovells team is ready. We can help you build innovative products, programs, and systems that allow you to collect, use, and process data in ways that best meet your needs.

Our global health privacy and cybersecurity team, part of Hogan Lovells' Privacy and Cybersecurity practice, advises health care organizations around the world on data protection and health privacy compliance issues. Whether it is responding to cyberattacks and data breaches; advising on transactional work; developing policies, procedures, and training; strengthening incident response protocols; or counseling on regulatory compliance, our team has a vast range of experiences to share on health privacy and security issues.

We are a known "market-leading group of esteemed practitioners" with "strong health privacy capabilities, including considerable knowledge in HIPAA and HITECH." Our dedicated health privacy and cybersecurity team is led by a partner who is one of the most recognized thought leaders in the area of health privacy and is the former Deputy General Counsel of the U.S. Department of Health and Human Services (HHS) and served as the lead lawyer in the development of the HIPAA regulations.

We have a coordinated global approach that allows us to work seamlessly on major cross-border matters. We have managed the largest most, complex health care data breaches to date and successfully represent clients in government investigations related to health care data breaches, evidenced by numerous investigations and successful outcomes.

Our capabilities at a glance

Representative experience

Successfully represented Anthem and helped drive a favorable resolution of the HHS OCR regulatory investigation and related litigation related to high-profile data breach.
Created and implemented HIPAA and privacy compliance programs for numerous health care and life sciences companies.
Working with numerous pharmaceutical and life science companies in connection with their review and development of privacy compliance programs.
Advising a leading biotech company on data privacy matters with regard to clinical trials in the EU involving both Pan-European strategic advice and detailed country-specific guidance.
Advising a large medical device manufacturer on numerous and wide-ranging issues, including connected health initiatives, HIPAA compliance and incident response, investigations, and reporting.
Advising multiple clients on the use of telehealth and other digital health applications to monitor COVID-19 patients in their homes.
Provided incident response counsel to companies with breaches involving tens of millions of records, including advising on forensic investigation, breach notification, and communications with customers.
Serve as the outside privacy counsel to WebMD. We provide the full range of privacy counseling services, including compliance, investigations, and policies and procedures.
Serving as primary outside privacy counsel for Fortune 500 companies on data privacy and security matters, including international data protection, data use agreements, and privacy policies and procedures.