Privacy Law Matters Blog

Susan Hintze, Founder and Co-Managing Partner of Hintze Law PLLC, has been appointed to the IAPP’s Board of Directors for a five-year term beginning 2025. The IAPP announced the addition of Susan along with fellow new directors: Volkswagen Group Chief Privacy Officer Oliver Draf, Google Data Protection Officer Kristie Chon Flynn, and GE Healthcare Chief Privacy and Data…

By Mike Hintze and Felicity Slater Last year, we wrote about a proposed New York State law that would have significant impacts for entities that process health and wellness related data. That bill failed to pass before the 2024 legislative session ended. But today, in the early days of the 2025 session, the New York…

By Jennifer RuehrMany of us are returning to work this month with New Year’s resolutions, predictions, and lists top of mind, and top of inbox.  As I turn back to work, I’m thinking ahead to how U.S. laws and regulations are going to impact my clients from a workforce perspective.  Here’s what is top of…

By Susan Hintze and Emily LitkaThis is Part 1 in a series of blog posts about the 2025 COPPA Final Rule. It provides a high-level overview of the Final Rule. Subsequent posts in the coming days will delve more deeply into individual aspects of the Final Rule and FTC comments, the issues raised, and implications…

By Sam CasticThe post below was originally published by the IAPP at https://iapp.org/news/a/10-areas-for-privacy-programs-to-focus-in-2025.  This past year was another jammed one for privacy teams and it was not easy to stay on top of all the privacy litigation, enforcement trends, and new laws and regulations in the U.S.Distilling those into focus areas and actionable steps can…

By Sam Castic and Hansenard Piou The Department of Justice adopted a final Rule on Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons that takes effect on April 8, 2025.  This sweeping Rule will prohibit a number of cross-border personal data flows to people and entities…

By Emily Litka On December 18th, in response to a request from the Irish Supervisory Authority (“SA”), the European Data Protection Board (the “EDPB”) published an opinion (the “Opinion”) on the application of the GDPR to certain aspects of AI model development and deployment. Specifically, the Opinion addressed: (a) when and how a model can…

Hintze Law PLLC is thrilled to announce Jennifer Ruehr’s promotion from Partner to Co-Managing Partner, joining forces with Susan Hintze to lead our firm into an exciting future. Together, they will oversee the day-to-day operations of the firm and provide strategic management oversight and leadership to drive our continued success. Jennifer has been a vital part…

by Felicity Slater and Kate Black On November 26, 2024, the Office of Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) announced a resolution agreement and corrective plan with Pennsylvania’s Holy Redeemer Hospital (Holy Redeemer). The agreement settles OCR’s claim that Holy Redeemer disclosed a patient’s protected health information (PHI)—including…

By Mike Hintze and Felicity Slater  On November 7, 2024, the Michigan legislature introduced Senate Bill 1082 / House Bill 6077, the Reproductive Data Privacy Act (the “RDPA” or the “act”). The act was introduced in the aftermath of the 2024 election cycle as Michigan Democrats brace to lose control of the House in 2025.…