Our privacy and security attorneys help clients navigate the complexities of state, federal, and international privacy and security laws and regulations. We assist clients by:

  • Advising on corporate transactions that require an assessment of privacy and security compliance
  • Counseling with respect to data breach reporting and notification under state and federal law, including drafting and coordinating individual and agency notifications with OCR and across states and foreign countries, and developing and implementing remediation efforts and corrective action plans
  • Responding to government investigations and negotiating resolution agreements with OCR
  • Analyzing privacy and security issues arising in the research context, including requirements for the use and sharing of data with research sponsors and among academic collaborators
  • Providing workforce training regarding the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule as well as other federal and state laws, with a focus on the practical implications of those rules for the client's workforce
  • Helping clients comply with non-U.S. data protection laws such as the EU General Data Protection Regulation (GDPR)
  • Drafting data use and sharing agreements, customized policies and procedures, training materials, and business associate agreements

Firm Highlights


Determining Whether Your Entity is a Reporting Company: Selected Issues

Under the Corporate Transparency Act ( CTA ), more than 30 million “ Reporting Companies ” will need to register with FinCEN (a bureau of the U.S. Treasury Department) and file Beneficial Ownership Information...


Verrill Recognized Nationally for Health Care, Land Use and Zoning, Commercial Litigation, Real Estate, and Trust & Estates by Best Lawyers®


Annual Employment Law Update

More details coming soon!


Successful Representation of Insurer before U.S. District Court for the District of Maine

Verrill successfully represented an insurer before the U.S. District Court for the District of Maine in an insurance coverage matter alleging that the insurer improperly denied a defense and indemnification to a landlord under...


The Donation Sweepstakes

Tis the season. Some people like to use the phrase “Doing Well by Doing Good.” Early U.S. business magnates knew that financial benefits can come from philanthropy. In 1888, Cornealius Vanderbilt donated $250,000 (that’s...


Corporate Transparency Act—Considerations Affecting Entities That Are Exempt or Excluded from Reporting Company Status

The Corporate Transparency Act ( CTA ) takes effect starting January 1, 2024. The Act is administered by FinCEN , a bureau of U.S. Treasury charged with combatting money laundering and other financial crimes...


Expanded 2024 Maine Diversity Summer Associate Program Now Accepting Applications


HIPAA Privacy Rule Changes: Just in time for the New Year?

In 2021, the Department of Health and Human Services (HHS) proposed changes to the Privacy Rule under the Health Insurance Portability and Accessibility Act of 1996 (HIPAA) that would significantly alter the current regulations...


HR Power Hour with Heather Hansen


Elections and Constitutional Law: Successfully Challenged Certification of Initiative Petition

In a victory for consumers and the ride-hailing public, the Massachusetts Supreme Judicial Court recently barred the Secretary of State from placing on the November ballot initiative petitions proposed by companies such as Uber...

Contact Verrill at (855) 307 0700