Hintze Lawyers Recognized in 2026’s Best Lawyers in America

August 21, 2025 in Hintze Law Recognitions

This year, eight of Hintze Law’s attorneys have been recognized by Best Lawyers® across a variety of categories, marking a significant milestone for the firm. Every one of our associates earned recognition, reflecting both the breadth of talent within our team and the dedication each attorney brings to their practice.

Partners Alex Schlight and Taylor Widawski received recognition this year; both partners being recognized in the Technology Law area and Alex also recognized in Privacy and Data Security Law, joining long-standing Best Lawyers® honorees Susan and Mike Hintze. In the last year, both Alex and Taylor also received recognition as SuperLawyers, highlighting their ongoing leadership and expertise in privacy law. In addition, Alex and Taylor serve as co-chairs of Hintze Law’s Artificial Intelligence + Machine Learning Privacy group, with Taylor also holding the role of co-chair for the firm’s Fintech + Financial Services Privacy group.

We are also proud of our associates, all of whom earned recognition for their expertise in Privacy and Data Security Law for the first time this year: Cameron Cantrell, Hansenard Piou, Felicity Slater, and Leslie Veloz. Their inclusion among this year’s honorees reflects not only their individual skill and dedication, but also the strength of our expertise, collaboration, and commitment to professional growth as a firm. This milestone is a testament to the hard work they have invested in their practices, the high standards they uphold for our clients, and the bright future they represent for our team.

Susan Hintze, Co-Managing Partner, has been voted the 2026 "Lawyer of the Year" for Information Technology Law in Seattle and recognized in the practice areas of Advertising Law.

Mike Hintze, Partner, has achieved continued recognition in the Information Technology Law and Technology Law practice areas.

Recognition in The Best Lawyers in America® is based on the geographic region and practice areas of the lawyers. Recognized lawyers are selected by peers based on professional expertise and are also evaluated by The Best Lawyers in America®.

Hintze Law PLLC is a Chambers-ranked and Legal 500-recognized, boutique law firm that provides counseling exclusively on global privacy, data security, and AI law. Its attorneys and data consultants support technology, ecommerce, advertising, media, retail, healthcare, and mobile companies, organizations, and industry associations in all aspects of privacy, data security, and AI law.

California Adopts Privacy, Cybersecurity, ADMT Regulations and Amendments

August 20, 2025 in CCPA, CPPA, Cybersecurity, Data Privacy, Artificial Intelligence, State Legislation

By Sam Castic

The California Privacy Protection Agency (CPPA) has adopted final regulations on privacy risk assessments, cybersecurity audits, and automated decisionmaking technology (ADMT), as well as amendments to existing CCPA regulations. Final publication of the regulations is pending review by the Office of Administrative Law, and depending on when that occurs, the regulations will likely take effect 10/1/2025 or 1/1/2026. Some key concepts from these regulations, and actions to consider, are below.

California’s Healthline.com Enforcement Action Shows CCPA’s Teeth – and Sensitive Data Reach

July 09, 2025 in CCPA, Data Privacy, Health + Biotech Privacy, State Legislation

By Mason Fitch and Kate Black

The California Attorney General’s Office (“OAG”) announced an enforcement action against Healthline.com on July 1 that marks a significant development in California Consumer Privacy Act (CCPA) enforcement. This action, accompanied by the largest fine under CCPA yet at $1.55 million, highlights critical areas of consideration for any company engaging in the advertising ecosystem as well as any company that processes sensitive personal information.

Congratulations to Mason Fitch on Promotion to Of Counsel

July 09, 2025 in Hintze Law Recognitions

Hintze Law PLLC is pleased to announce Mason Fitch’s promotion to Of Counsel at the firm.

Texas District Court Vacates Majority of HIPAA Reproductive Privacy Rule

June 24, 2025 in Data Privacy, Health + Biotech Privacy

by Cameron Cantrell and Felicity Slater

On June 19, 2025, the U.S. District Court in the Northern District of Texas vacated the vast majority of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (the “HIPAA Reproductive Privacy Rule” or “Rule”). The Department of Health and Human Services (“HHS”) published the Rule in the Federal Register in April 2024 with a compliance date of December 23, 2024. The District Court’s decision to vacate the reproductive privacy aspects of the Rule has an immediate and nationwide effect.

Hintze & Partners Recognized by Chambers in 2025 USA Rankings

June 05, 2025 in Hintze Law Recognitions

Hintze Law PLLC is delighted to announce the Chambers & Partners recognition of Susan Hintze, Mike Hintze, Sam Castic, and Mason Fitch in its USA Guide 2025. These recognitions include the firm’s sixth year being nationally ranked in Privacy and Data Security, and third year in Privacy & Data Security: Healthcare.

State Privacy Regulators Announce Formation of Collaboratory Consortium

April 17, 2025 in CPPA, Data Privacy, State Legislation

by Felicity Slater and Susan Hintze

On April 16, 2025, the California Privacy Protection Agency (CPPA) and state Attorneys General from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, and Oregon announced the formation of the bipartisan "Consortium of Privacy Regulators." The focus of the Consortium will be to foster multi-state coordination, including sharing of expertise and resources, in investigation of potential violations of and enforcement of their state's respective comprehensive privacy laws.

Takeaways From the New DOJ Guidance on Its Cross-Border Data Rule

April 14, 2025 in Cybersecurity, Data Privacy, DOJ

By Sam Castic

On Friday April 11, 2025, the DOJ released a Compliance Guide and more than 100 FAQs on the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons Rule (the “DOJ Rule”). It also released an Implementation and Enforcement Policy, which indicates it will not prioritize enforcement against companies making good faith efforts to comply until July 8, 2025.

GenAI in the Workplace: Hong Kong PCPD Releases Checklist for Employer Policies

April 09, 2025 in Artificial Intelligence, Data Privacy, GenAI, Global Privacy & Security, Global Privacy Updates, Workplace Privacy

By Leslie Veloz and Jennifer Ruehr

The Hong Kong Office of the Privacy Commissioner for Personal Data (“PCPD”) recently published its Checklist on Guidelines for the Use of Generative AI by Employees (“Checklist”). The goal of the Checklist is to help organizations draft internal policies and procedures governing employee use of generative AI (“GenAI”) tools, especially where GenAI is used to process personal data.

Virginia Governor Signs Reproductive Health Data Restrictions into Law

April 02, 2025 in Data Privacy, Health + Biotech Privacy, State Legislation

by Cameron Cantrell and Felicity Slater

On March 24, 2025, Governor Youngkin (R) of Virginia signed SB 754—which amends the Virginia Consumer Protection Act (VCPA) to restrict the collection and processing of “reproductive or sexual health information” and is enforceable through a private right of action—into law. The law will take effect July 1, 2025.

French Competition Authority Fines Apple €150M Alleging Market Power Abuse of Ad Privacy System

April 01, 2025 in Global Privacy & Security, Global Privacy Updates, Online Advertising

By Susan Hintze and Hansenard Piou

Note that the Autorité has not yet been published the decision in question as it is in process of redacting information relating to trade secrets. Please check back for updates.

Fourth Circuit Publishes Landmark Ruling on 21st Century Cures Act “Information Blocking”

March 24, 2025 in Data Privacy, Health + Biotech Privacy

By Cameron Cantrell and Kate Black

On March 12, 2025, the Fourth Circuit Court of Appeals ruled that (1) the information blocking prohibition in the federal 21st Century Cures Act (“Cures Act”) was plausibly violated when an Electronic Health Record (EHR) provider blocked bot access to its systems without sufficient justification, and (2) this violation may support a Maryland state law unfair competition claim, despite the Cures Act not having its own private right of action. This decision notably appears to be the first Circuit Court decision concerning the information blocking prohibition and, for parties subject to the rule, raises the risk that information blocking may be enforceable through a de facto state privacy right of action.

Don’t Sleep on Maryland: The Maryland Online Data Privacy Act Will Keep Health and Wellness Companies Up at Night

February 14, 2025 in Data Privacy, State Legislation, Health + Biotech Privacy

By Felicity Slater and Kate Black

The Maryland Online Data Privacy Act (“MODPA” or the “Act”), which takes effect October 1, 2025, establishes a set of novel requirements that will have a particular impact for companies operating in the health and wellness sectors.

Hintze & Partners Recognized by Chambers in 2025 Global Rankings

February 13, 2025 in Data Privacy, Health + Biotech Privacy, Hintze Law Recognitions

Hintze Law and its lawyers have once again been recognized in Chambers & Partners for expertise in Privacy and Data Security in the 2025 Chambers Global Guide. These recognitions include Hintze Law’s fifth year being ranked as an Elite Law Firm for Privacy and Data Security as well as the firm’s second year receiving recognition for Privacy and Data Security: Healthcare.

Hintze Law PLLC Attorneys Selected for 2025 LCLD Fellows and Pathfinder Programs

February 11, 2025 in Hintze Law Recognitions

Hintze Law is pleased to announce the two attorneys that have been chosen to participate in the Leadership Council on Legal Diversity’s (LCLD) professional development programs for 2025! Partner Sam Castic has been selected for the LCLD Fellows Program, designed for high-potential mid-career attorneys that have demonstrated strong leadership capabilities. Senior associate Emily Litka will represent Hintze Law in the LCLD Pathfinders Program, which recognizes early-career attorneys who exhibit signs of an emerging leader within their organization.

Final COPPA Rule Amendments: Definitional Changes

February 06, 2025 in COPPA, Data Privacy

By Susan Hintze, Emily Litka, and Amy Lanchester

This is Part 2 in a series of blog posts about the 2025 COPPA Final Rule. It provides a comprehensive review of the revised definitional changes to the Rule. Subsequent posts in the coming days will delve more deeply into the direct and online notice, parental consent, and data governance requirements. Our unofficial redlined copy of the Final Rule can be found here.

Susan Hintze Appointed to the 2025 IAPP Board of Directors

January 31, 2025

Susan Hintze, Founder and Co-Managing Partner of Hintze Law PLLC, has been appointed to the IAPP’s Board of Directors for a five-year term beginning 2025.

New York Legislature Passes Extraordinarily Restrictive Health Data Privacy Bill

January 22, 2025 in State Legislation, Health + Biotech Privacy

By Mike Hintze and Felicity Slater

Last year, we wrote about a proposed New York State law that would have significant impacts for entities that process health and wellness related data. That bill failed to pass before the 2024 legislative session ended. But today, in the early days of the 2025 session, the New York State legislature has passed Senate Bill S929 (SB S929), which is essentially unchanged from last year’s bill.

Workplace Privacy – 5 Things I’m Keeping in Mind for 2025

January 21, 2025 in Technology Law, Workplace Privacy, Artificial Intelligence, GenAI, FCRA

By Jennifer Ruehr

Many of us are returning to work this month with New Year’s resolutions, predictions, and lists top of mind, and top of inbox. As I turn back to work, I’m thinking ahead to how U.S. laws and regulations are going to impact my clients from a workforce perspective. Here’s what is top of mind for me right now:

Fair Credit Reporting Act
State law AI requirements
Biometrics in the workplace
Genetic data risk
Workplace monitoring

The FTC Issues Final COPPA Rule Amendment

January 20, 2025 in COPPA, Data Privacy

By Susan Hintze and Emily Litka

This is Part 1 in a series of blog posts about the 2025 COPPA Final Rule. It provides a high-level overview of the Final Rule. Subsequent posts in the coming days will delve more deeply into individual aspects of the Final Rule and FTC comments, the issues raised, and implications for specific industry sectors.Our unofficial redlined copy of the Final Rule can be found here.