The national law firm of Hinshaw & Culbertson LLP is pleased to announce the election of 12 attorneys as new partners of the firm, effective July 1, 2018. Located in nine of the firm's offices throughout the U.S., the new partners reflect Hinshaw's commitment to long-term client relationships and prioritizing the client's success by providing a wide variety of sophisticated legal advice and counsel.

Read Hinshaw partner Jason Oliveri's guest column in McKnight's Senior Living examining the growing role of AI companions in elder care, and the heightened privacy and bias risks these technologies may pose for LGBTQ+ residents.

Read Hinshaw partner Jason Oliveri’s article in Cyber Defense Magazine, examining the cybersecurity risks healthcare organizations face when deploying AI agents that handle protected health information (PHI).

Explore Hinshaw partner Jason Oliveri’s insights in Privacy Daily on the New York Child Data Protection Act. Learn how this first-of-its-kind law enhances privacy protections for minors, introduces age flag requirements, and what steps organizations should take to ensure compliance.

Hinshaw partner Jason Oliveri will join other industry experts for a collaborative roundtable discussion at the Global GRC, Data Privacy & Cyber Security ConfEx event on May 21, 2025.

Hinshaw partner Jason Oliveri will participate as a panelist in a virtual GeneralCounsel360 discussion titled "Data Privacy in the Age of Digital Transformation" on December 3, 2024.

Hinshaw partner Jason Oliveri will participate in a collaborative live and virtual discussion with other industry experts at the Global GRC, Data Privacy & Cyber Security ConfEx event on November 21, 2024.

Hinshaw partner Jason Oliveri will present at a live CLE Health Law webinar, “Emotionally Intelligent AI in Elder Care: Legal and Compliance Governance for Resident-Facing AI” on August 12.

Hinshaw partners Aimee Delaney and Jason Oliveri will present on “The Future of Work: Embracing Generative AI For Workplace Innovation” at a CLE webinar on June 8.

In a Privacy & Cyber Bytes Alert, we review takeaways from the recently concluded Mortgage Bankers Association's Conference on Legal Issues and Regulatory Compliance. Lenders and servicers with consumer-facing platforms that collect personal information need to initiate cybersecurity compliance efforts immediately.

Effective October 29, 2018, the New Jersey Paid Sick Leave Law will require that all private sector employers, regardless of size, provide forty (40) hours of paid sick leave each benefit year to employees working in New Jersey. If the employer already offers a minimum of 40 hours of paid time off, the employer is in compliance with the law as long as employees can use the time for the purposes stated under the law, e.g., personal days, vacation days, or sick days. If the employer is not currently offering this benefit, here are some of the things the employer needs to know in order to fashion a compliant policy:

A growing number of employers are offering student loan repayment assistance as a means of attracting and retaining talent. Industries like tech, financial services, and health services are among the early adopters, offering variations of the same general benefit:  the employer agrees to pay a certain amount—either a set figure or a percentage of salary—toward their employee’s student loan debt. Since student loan repayment benefits are relatively novel, the rules for both employers offering the benefit, and the student loan servicers administering it, are not yet explicit.

Explore how AI governance expectations are rapidly shifting toward operational compliance, as regulators push insurers to embed AI oversight across cybersecurity, claims, and decision‑making.

Read our practical compliance playbook for deploying AI companions in senior living settings, covering data mapping, consent for cognitively vulnerable adults, vendor controls, durable governance frameworks, and more.

Discover key insights from the IAPP 2026 Global Summit on topics affecting the evolving privacy landscape–from cookies, wiretapping theories, and health data, to children’s privacy, dark patterns, and AI governance.

If you are a business operating in the Sunshine and/or Lonestar state, then this alert is for you. As discussed further below, Florida recently issued regulations, effective July 18, 2024, clarifying certain requirements set forth in the Florida Digital Bill of Rights (FDBR), which went into effect on July 1, 2024.

Whether your company is a new fintech or a traditional financial institution with deep roots, you should be taking notice of the Consumer Financial Protection Bureau's (CFPB) October 27, 2022 announcement concerning Section 1033 of the Dodd-Frank Act.[1] Among other things, Section 1033 mandates that financial services companies provide consumers with access to the data they generate, such as payment histories and transaction records, in a usable electronic format. It further provides that the right to access be "subject to rules prescribed by the Bureau."     

Augustus Caesar once said, "if you want a rainbow, you have to deal with the rain." Presumably, this was said—in Latin—after he overhauled all aspects of ancient Roman life. Thousands of years later, the same sentiment holds true for those struggling with the quagmire of data privacy and protection laws proliferating in the United States (U.S.) and seeking to understand what they can do with the data they have collected in light of those laws. While compliance and understanding may feel like a colossal chore, in the end, you and your business might find that it was well worth the effort. 

Hinshaw summer associate Andrew C. Clausen contributed to the research and drafting of this alert.

Eleventh Circuit Requires Sender to Have Knowledge That Fax Violates TCPA in Order to Impose Treble Damages

Watch What You Say: The Hypothetical Least Sophisticated Consumer