Robinson Cole LLP
High Contrast Mode
Marquee

Data Privacy + Cybersecurity Litigation

As our world increasingly depends on information technology in the digital sphere, businesses everywhere are encountering data protection and cybersecurity incidents at an astonishing rate.

To help you stay ahead of this increasing business risk, our Data Privacy + Cybersecurity practice group provides support in mapping high risk data, implementing safeguards, and complying with rapidly changing data privacy and security laws. We also help you develop and implement incident response plans, data breach notification, and training programs for employees on protecting company information.

Our clients trust our advice when it comes to investing time and resources into anticipating and preventing security incidents and privacy issues. We represent companies in privacy and security litigation matters involving unauthorized access, use or disclosure of personally identifiable, health, or financial information, and in litigation around allegations of violations of security measures to protect the data.

Our Services

Our clients include businesses in all industries facing enforcement actions or litigation related to the collection, use or disclosure of data.

Our lawyers are skilled in helping clients avoid and mitigate cyber intrusions, including malware, ransomware, phishing attacks, insider threats, tracking technology and social media risk. We advocate for our clients when litigation is necessary due to alleged privacy violations, data breach class actions, and government investigations. We work with you to resolve matters through negotiation, mediation, arbitration, the court system or before federal or state regulatory agencies.

Our lawyers are adept in interpreting the nuances of federal and state data privacy and security rules and regulations and have deep knowledge and experience in representing clients in disputes and litigation involving data privacy and security.

Our Team

Our Data Privacy + Cybersecurity practice group chair is a former Assistant Attorney General who served as Deputy Chief of the Rhode Island Attorney General’s office. Linn works with multiple state attorneys general on compliance and enforcement actions involving data breaches and data security. She is a former adjunct professor at Brown University teaching Privacy Law.  She has been an adjunct professor at Roger Williams Law School teaching Privacy Law for the past ten years. Linn has been ranked in Chambers USA – America's Leading Lawyers for Business in the area of Privacy Law since 2012 and ranked globally by Chambers since 2022.

Because data privacy and cybersecurity issues cut across all business enterprises, our team collaborates with lawyers from the firm’s diverse practice areas to match the right resources to each client’s unique situation. We have extensive experience with data privacy and security class action litigation, litigation surrounding the use of tracking technology and pixels, investigations by consumer protection divisions of state Attorneys General offices, and the Department of Health and Human Services Office for Civil Rights related to HIPAA enforcement actions.

Our lawyers are featured in speaking engagements, media interviews and have received Readers' Choice awards from JD Supra and the National Law Review. Team members regularly contribute to the Data Privacy + Security Insider blog: www.dataprivacyandsecurityinsider.com

Whatever your business goals are, our Data Privacy + Cybersecurity practice group is equipped to help you anticipate and limit risk. When litigation or enforcement actions arise, we provide unwavering support to advocate for you in negotiations, mediation, arbitration, the court system or before regulatory agencies.

Experience


Data Breach Class Action Law Suit

Representation of a large hospital system in a data breach class action lawsuit, which was dismissed on summary judgment.

Alleged HIPAA Violations

Successfully defended numerous health care entities in investigations of alleged HIPAA violations by the Office for Civil Rights, resulting in dismissal or are still pending.

Wrongful Disclosure of Information

Defended a health care entity in the alleged wrongful disclosure of information to an employer, which was dismissed.



Publications


Data Privacy + Cybersecurity Insider teaser
September 18, 2025

Data Privacy + Cybersecurity Insider

Data Privacy + Cybersecurity Insider teaser
October 24, 2024

Data Privacy + Cybersecurity Insider

April 1, 2024

Pixel Litigation: How Security Professionals Can Assist with Risk Mitigation

Security Technology, a publication of ASIS International

In the article, Linn explains the new and growing issue of pixel litigation, which typically alleges that organizations collect, use and disclose personal information of consumers, who browse their website without providing their consent. Linn suggests there are several things legal, compliance and security professionals can consider doing now in their effort to assess and mitigate the risk of potential future pixel litigation. Among them, if an organization’s website uses ad tracking, pixels or cookies, they can review the website’s privacy policy to determine whether it should be made more transparent about the use of tracking technology, what the technology is capturing, and to whom that data is disclosed. Read the article.

Data Privacy + Cybersecurity Insider teaser
September 18, 2025

Data Privacy + Cybersecurity Insider

Data Privacy + Cybersecurity Insider teaser
October 24, 2024

Data Privacy + Cybersecurity Insider

April 1, 2024

Pixel Litigation: How Security Professionals Can Assist with Risk Mitigation

Security Technology, a publication of ASIS International

In the article, Linn explains the new and growing issue of pixel litigation, which typically alleges that organizations collect, use and disclose personal information of consumers, who browse their website without providing their consent. Linn suggests there are several things legal, compliance and security professionals can consider doing now in their effort to assess and mitigate the risk of potential future pixel litigation. Among them, if an organization’s website uses ad tracking, pixels or cookies, they can review the website’s privacy policy to determine whether it should be made more transparent about the use of tracking technology, what the technology is capturing, and to whom that data is disclosed. Read the article.

Data Privacy + Cybersecurity Insider teaser
October 5, 2023

Data Privacy + Cybersecurity Insider

Legal Update: Supreme Court Narrows Reach of Computer Crime Statute teaser
June 16, 2021

Legal Update: Supreme Court Narrows Reach of Computer Crime Statute



Data Privacy + Cybersecurity Insider teaser
October 5, 2023

Data Privacy + Cybersecurity Insider

Legal Update: Supreme Court Narrows Reach of Computer Crime Statute teaser
June 16, 2021

Legal Update: Supreme Court Narrows Reach of Computer Crime Statute

News


April 2, 2024

Linn Freedman Explains Pixel Litigation and Offers Risk Mitigation Strategies in Security Technology

Data Privacy + Cybersecurity Team chair Linn F. Freedman authored the article, “Pixel Litigation: How Security Professionals Can Assist with Risk Mitigation,” published in the April 2024 issue of Security Technology, a publication of ASIS International. In the article, Linn explains the new and growing issue of pixel litigation, which typically alleges that organizations collect, use and disclose personal information of consumers, who browse their website without providing their consent. Linn suggests there are several things legal, compliance and security professionals can consider doing now in their effort to assess and mitigate the risk of potential future pixel litigation. Among them, if an organization’s website uses ad tracking, pixels or cookies, they can review the website’s privacy policy to determine whether it should be made more transparent about the use of tracking technology, what the technology is capturing, and to whom that data is disclosed. Read the article.

Security Technology
December 9, 2020

Linn Freedman Recognized as a Go-To Thought Leader by National Law Review

National Law Review
January 23, 2020

Linn Freedman Is Named to "Women to Watch in Health IT 2020" list

Health IT 2020
April 2, 2024

Linn Freedman Explains Pixel Litigation and Offers Risk Mitigation Strategies in Security Technology

Data Privacy + Cybersecurity Team chair Linn F. Freedman authored the article, “Pixel Litigation: How Security Professionals Can Assist with Risk Mitigation,” published in the April 2024 issue of Security Technology, a publication of ASIS International. In the article, Linn explains the new and growing issue of pixel litigation, which typically alleges that organizations collect, use and disclose personal information of consumers, who browse their website without providing their consent. Linn suggests there are several things legal, compliance and security professionals can consider doing now in their effort to assess and mitigate the risk of potential future pixel litigation. Among them, if an organization’s website uses ad tracking, pixels or cookies, they can review the website’s privacy policy to determine whether it should be made more transparent about the use of tracking technology, what the technology is capturing, and to whom that data is disclosed. Read the article.

Security Technology
December 9, 2020

Linn Freedman Recognized as a Go-To Thought Leader by National Law Review

National Law Review
January 23, 2020

Linn Freedman Is Named to "Women to Watch in Health IT 2020" list

Health IT 2020
November 4, 2019

Linn Freedman Recognized by Lexology as a Legal Influencer

Lexology
September 4, 2019

Linn Freedman Shares Privacy Insight in Recent Data Breach and Ransomware Media Coverage

The Wall Street Journal, Connecticut Public Radio, and OneTrust DataGuidance
February 13, 2019

Linn Freedman Participates in Cybersecurity Law Webinar

June 11, 2018

Linn Freedman Participates in Cybersecurity Panel Discussion for Association of Certified Fraud Examiners


November 4, 2019

Linn Freedman Recognized by Lexology as a Legal Influencer

Lexology
September 4, 2019

Linn Freedman Shares Privacy Insight in Recent Data Breach and Ransomware Media Coverage

The Wall Street Journal, Connecticut Public Radio, and OneTrust DataGuidance
February 13, 2019

Linn Freedman Participates in Cybersecurity Law Webinar

June 11, 2018

Linn Freedman Participates in Cybersecurity Panel Discussion for Association of Certified Fraud Examiners

Events


Past

H-ISAC Third Party Risk Subcommittee

Aug 10 2022
Health- Information Sharing & Analysis Center
Past

Drones Take Flight! An Overview of FAA Regulations, Enforcement, and Best Practices in Privacy & Security

Apr 26 2017
Federal Bar Association
Past

H-ISAC Third Party Risk Subcommittee

Aug 10 2022
Health- Information Sharing & Analysis Center
Past

Drones Take Flight! An Overview of FAA Regulations, Enforcement, and Best Practices in Privacy & Security

Apr 26 2017
Federal Bar Association
Past

Hot HIPAA Topics

Feb 10 2016
3rd Central Massachusetts Health Care Symposium
Past

Fundamentals of Data Security Law

June 2012
MCLE Program
Past

Hot HIPAA Topics

Feb 10 2016
3rd Central Massachusetts Health Care Symposium
Past

Fundamentals of Data Security Law

June 2012
MCLE Program

Data Privacy + Cybersecurity Insider


Phishing Now Top Method for Initial Unauthorized Network Access

According to Cisco Talus researchers, phishing is the primary method threat actors use to gain unauthorized access to networks, accounting for more than one-third of all incidents in the first quarter of 2026. This increase is attributed to threat actors using legitimate AI tools to enhance phishing campaigns, particularly against health care and government sectors.... Continue Reading

Visit Blog

SCOTUS Hears the Next Big Fourth Amendment Fight Over Digital Location Data

Earlier this year, the Pennsylvania Supreme Court held that users generally lack a reasonable expectation of privacy in unprotected Google search records, underscoring how aggressively some courts are still applying third-party doctrine principles to digital data. Commonwealth v. Kurtz, 348 A.3d 133 (Pa. 2025) (our previous blog post on Kurtz is available here). The question... Continue Reading

Visit Blog

CCPA Employee Data Rulemaking Could Reshape Employer Privacy Compliance in California

The California Consumer Privacy Act (CCPA) continues to stand apart as the only comprehensive state privacy law in the U.S. that applies to personal information relating to employees, job applicants, and independent contractors. Since that coverage expanded in January 2023, many employers have had to navigate the difficult task of applying a consumer privacy framework... Continue Reading

Visit Blog

Tempus AI Faces Class Action Cases for Collection of Genetic Information in Acquisition

Multiple class action cases have been filed against Tempus AI  alleging that, during its acquisition of Ambry Genetics, the company improperly collected and disclosed genetic information without obtaining prior written consent from individuals during its acquisition of Ambry. Tempus acquired Ambry, a genetic testing firm, in February 2025 for $600 million. The acquisition included the... Continue Reading

Visit Blog

EU AI Act Update: Omnibus Talks Stall, but Clock Is Still Ticking

Talks between European Union legislators broke down on Wednesday as they tried to agree on proposed amendments to the EU AI Act. At the center of the debate is the Digital Omnibus on AI, first introduced in November 2025, which would delay several key compliance deadlines under the Act. If approved, the Digital Omnibus would... Continue Reading

Visit Blog

What Legal AI Is Really Changing in Law Firm Economics

Legal commentary on artificial intelligence in law practice often focuses on speed: drafts that once took days can now be produced in hours, and research that once took hours can now be narrowed in minutes. Those gains are real, but they do not resolve the more important operational questions. Many firms still don’t know whether... Continue Reading

Visit Blog

Privacy Tip #489 – Social Media Scams #1 in 2025

The Federal Trade Commission (FTC) recently reported that, in 2025, social media scams were the costliest of all scams against consumers, with a whopping $2.1 billion lost. Thirty percent of those who reported losing funds in 2025 indicated that the scam started over social media. The number of 2025 scams beginning on social media increased... Continue Reading

Visit Blog

DOJ’s Big Win in North Korean IT Worker Fraud Scheme

On April 15, 2026, the Department of Justice (DOJ) announced that two U.S. nationals, Kejia Wang and Zhenxing Wang, were sentenced for facilitating a North Korean IT worker scheme that compromised over 80 U.S. identities, with sentences of 108 and 92 months respectively, supervised release, and forfeiture orders. The scheme involved the defendants operating “laptop... Continue Reading

Visit Blog

California’s DROP Regime will Change the Data Broker Risk Equation

California’s new Delete Request and Opt-Out Platform (DROP) goes live on August 1, 2026, and the compliance stakes are enormous. State officials have warned that a single missed deletion cycle could create theoretical penalty exposure of $1.5 billion for one data broker. That number reflects how aggressively the Delete Act is designed to work. One consumer request can... Continue Reading

Visit Blog

OpenAI’s New Privacy Filter: A Development with Limits

On April 22, 2026, OpenAI released its new Privacy Filter tool, designed to identify and mask sensitive information in text before that text is stored, shared, or used in downstream processing. OpenAI says the tool can detect items such as names, addresses, account numbers, private dates, and other personal data in documents, logs, and datasets... Continue Reading

Visit Blog

Legal AI Delivers More Value When It Is Tied to Business Outcomes

As corporate legal departments continue adopting AI, the conversation is shifting from experimentation to strategy. According to the Thomson Reuters Institute’s 2026 State of the Corporate Law Department Report, nearly half of legal departments now report department-wide AI adoption, and technology has become a top strategic priority for many general counsel. That momentum matters, but adoption... Continue Reading

Visit Blog

Privacy Tip #488 – Account Change Phishing Alerts from “Apple” Are Tricking Users

A new, yet old, scheme has been quite successful and users should beware. If you get an account change message from Apple, be on high alert that it is fake and malicious. According to Bleeping Computer, the scheme involves a threat actor using an Apple support email (e.g., appleid@id.apple.com) to send phishing emails to unsuspecting... Continue Reading

Visit Blog

Social Engineering Schemes Target C-Suite Executives

March was a busy month for former Black Basta affiliates who are using old social engineering techniques to target executives in the manufacturing, professional, scientific, and technical services industries. According to Reliaquest, the activity of the threat actors indicates that these sectors “were likely direct targets.” According to its report, “Attackers are using automation to... Continue Reading

Visit Blog

Click to Join, Hard to Leave: FTC Reopens Negative Option Rulemaking

On March 11, 2026, the Federal Trade Commission (FTC) announced an Advance Notice of Proposed Rulemaking (ANPRM) highlighting its Rule Concerning the Use of Prenotification Negative Option Plans, seeking comment on whether the rule should be amended or supplemented to better address deceptive or unfair negative option practices. The FTC describes negative options as marketing... Continue Reading

Visit Blog

CNN Must Defend Privacy Suit Alleging Data Sharing with Microsoft and Adtech Firms 

A federal judge has ruled that CNN must face a proposed class action alleging that its website shared consumers’ personal information with Microsoft and adtech firms without consent, in alleged violation of the California Invasion of Privacy Act (CIPA). The lawsuit challenges CNN’s alleged use of online tracking tools and the downstream sharing of data in the digital advertising ecosystem.  According... Continue Reading

Visit Blog