Ed provides legal guidance during the conception, development, launch, and support of artificial-intelligence (AI)-enabled and other digital health products, and structures sophisticated data development, use, and disclosure frameworks designed to help clients execute strategically important business objectives while avoiding legal pitfalls. He has extensive experience advising clients on the use of website and mobile application user tracking technologies and the potential regulatory and litigation challenges to their deployment, including under wiretapping/eavesdropping statutes. He also advises clients on a broad range of information privacy and cybersecurity laws, including the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, 42 CFR Part 2, the Federal Trade Commission Act, and state consumer privacy laws.

Ed manages complex, high-profile ransomware attacks and other data breaches, guiding clients through all aspects of incident response and remediation. He represents clients in privacy, consumer protection and cybersecurity compliance investigations conducted by the US Department of Health and Human Services Office for Civil Rights (OCR), state attorneys general and the Federal Trade Commission. Ed has extensive experience negotiating favorable settlements on behalf of clients when these investigations result in allegations of noncompliance.

Show Less

• Served as lead counsel to a health system with more than 500 clinical sites of service in responding to a ransomware attack, including coordinating legal and compliance advice, cybersecurity and forensics teams, media response, communications with regulators, and ransom negotiations with a threat actor
• Represented clients in response to numerous OCR HIPAA compliance investigations, including successful resolutions with no adverse findings and multiple favorable settlements for clients
• Represented a publicly traded technology company in investigating and responding to an international cyberattack that affected its services and operations
• Advised a large electronic health record company on various data use and disclosure considerations related to its development of a personal health record for patients of its healthcare provider customers

Show Less

• Massachusetts Lawyers Weekly, Top 20 Managing Partner, 2024 and 2025
• Burton Awards, Law360 Distinguished Legal Writing Award, 2023
• BTI, Client Service All-Stars, 2022
• Acritas Stars, listed among independently rated lawyers, 2020

Show Less