Innovative, practical counsel for privacy and strategic goals

Meghan O'Connor provides strategic counsel in the areas of data privacy and cybersecurity, regulatory compliance, information governance, commercial contracting and transactions, with particular attention to companies managing health and other personal data. She advises on:

Innovative arrangements to leverage data and achieve strategic goals while managing risk.

Compliance program development with operationally feasible practices in light of ever-evolving privacy and security laws.

Implementing emerging technologies, including artificial intelligence (AI), as well as developing commercialization strategies.

Transaction support, including diligence, risk management, and data and IT integration.

Privacy and security incident preparedness and response through all phases of recovery, including business continuity, breach notification and government investigation.

Meghan believes good privacy and security can drive market growth, consumer trust and strategic opportunities for companies at all stages of development. She leverages over a decade of experience to help her clients navigate complex regulatory requirements.

Meghan also is an adjunct professor at Marquette University Law School, where she teaches data privacy law.

Meghan is a Certified Information Privacy Professional (CIPP/US) by the International Association of Privacy Professionals. She is co-chair of both the Data Asset Management, Privacy & Cybersecurity and the Artificial Intelligence teams.

Bar Admissions
Wisconsin

Education
Lawrence University (B.A., magna cum laude, 2005)

Marquette University Law School (J.D., cum laude, 2010)

Marquette Elder's Advisor (NKA Marquette Benefits & Social Welfare Law Review), editor in chief

Northwestern University, Kellogg School of Management, Certificate, Quarles & Brady Leadership Program (2018)

"Anticipating Potential Updates To Ill. Biometric Privacy Law" "COVID-19 and Increased Cyber Risk" "COVID-19 and the risks of an expanded remote workforce" "Cybersecurity & Data Privacy (including GDPR)" "Data Breaches and Security Incidents: Effective Preparation and Incident Response" "Data Privacy and Security 2018 First Quarter Update" "Examining the Law on Health Information and COVID-19 for Businesses" "GDPR Enforcement Day is Here!" "Health Information Technology, Privacy and Security 2018 First Quarter Update" "HIPAA 101" "How COVID-19 increases cyber risk and tips to protect yourself" "How HIPAA restricts releasing data on COVID-19 deaths" "NASP presentation: Lunch with a Lawyer: Privacy Please! Recent developments in federal and state privacy laws that impact specialty pharmacy" "One Is the Loneliest Number: Alabama Becomes the Final State to Pass Data Breach Notification Law" "Privacy Breaches and Responding to a Privacy Breach (and Insurance Coverage) ‐ The Basic Steps: 5 Things You Have to Do" "South Dakota Officially the 49th State to Pass Data Breach Notification Law" ""So, don't ask me no questions and I won't tell you no lies:" Physician Receives Criminal Conviction for HIPAA Violations and Obstructing a Criminal Health Care Investigation" "Circling Back" After the New Year: Recent Updates in Data Privacy & Security "Clinician Should Have Overridden It" Defense Is Gone: New Liability Rules for Clinical AI SystemsHealthcare Business Today Article by Meghan O'Connor, Sarah Erdmann Summarizes New Health Plan Privacy RequirementsHR Executive Article by Meghan O'Connor, Jason Stavely Provides Insight on How Employers Can Increase Accountability for Employee AI Use 2023 AI Safety Executive Order Revoked and What Lies Ahead for AI 2023 Year-End Employee Benefits Updates 2024 U.S. Privacy Timeline AI in the Therapist's Chair? California Says No-and Backs It Up With $10,000 Penalties All Tricks, No Treats: Record-breaking HIPAA Settlement Announced Arizona Offshoring Requirements Set to Change Article by Meghan O'Connor About New Reproductive Health Privacy Law Published by Corporate Compliance InsightsBank On It: Finance News You Can Count On California Governor Signs the Genetic Information Privacy Act California Governor Vetoes Genetic Information Privacy Act California Legislators Draw the Line on Clinical AI: What Health Care Organizations Need to Know California Passes Bill Establishing Genetic Information Privacy Act California Voters Approve California Privacy Rights Act: What You Need To Know CCPA Amendment Creating De-Identified Health Information Exception Will Change How We Create and Use De-Identified Data Ciox Case Changes the HIPAA Rules on Patient Rate Caps for Access to Health Records Ciox Case Changes the HIPAA Rules on Patient Rate Caps for Access to Health Records... Which Can Be Very Confusing in Wisconsin! CISA Issues Guidance on Heightened Health Care Cybersecurity Threats Amid COVID-19 Compliance Eve Ends with HIPAA Reproductive Health Privacy Rule Order out of Texas: But is it a Gift or Lump of Coal for Regulated Entities? Confidentiality of Substance Abuse Records: Everything You Want Someone Else to Know so You Don't Have to Remember It. COVID-19 Exploitations: Malicious Cyber Actors Strike with Pandemic-Related Scams CPRA is in Effect: What Health and Life Sciences Entities Need to Know Day Three of Trump's Presidency Provides Additional Clarity on the Administration's Stance on AI Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Diving into the Washington My Health My Data Act Do the New Health Cybersecurity Guidelines Set a New Standard for Reasonable and Appropriate Safeguards? DOJ Uses Successor Liability as a Civil Cybersecurity Enforcement Tool: Comprehensive Diligence Now May Save Millions Later FBI Issues Warning of Increased Ransomware Targeting Educational Institutions Five Bills, One Governance Framework: Enterprise Action Items for Health Care Use of AI Fraud in the Time of Corona: Beware of Individual Impersonating OCR Investigator Friendly Reminder - Finalize and Post Your Consumer Health Data Privacy Notice Before March 31 Go for Gold: 42 CFR Part 2 Compliance Deadline and HHS Enforcement is Here Happy Halloween: RIP to the HIPAA Privacy Rule? Health Information Technology, Privacy and Security 2018 First Quarter Update HHS Extends Information Blocking and Health IT Certification Compliance Dates HHS Finalizes AI Transparency Rule HHS OCR Withdraws Tracking Technologies Appeal in AHA v. BecerraHHS Office for Civil Rights Announces Proposed Rule Increasing HIPAA Privacy Rule Protections for Reproductive Care HHS Tracking Technology Guidance Vacated by Federal Court HIPAA Flexibility for COVID-19 Testing Sites HIPAA Reproductive Health Rule Vacated Nationally How Does HIPAA Prevent Using and Disclosing COVID-19 Vaccination Information? HHS OCR Issues Guidance Illinois Introduces Bills to Amend BIPA Taking Away Private Right of Action and Adding ECGs Information Blocking Rule Expands to Full Designated Record Set Introduction to AI and Current Hot Topics It's the End of the PHE as We Know It Joint Commission Issues Sentinel Event Alert on Cybersecurity in Health Care Key Considerations for Healthcare Providers Responding to Law Enforcement Requests Managing Cyber Risk for Research and Higher Education Institutions During COVID-19 Pandemic March Proves an Exciting Month for Data Privacy Meghan O'Connor and Ashleigh Giovannini Outline Evolving U.S. Geofence Technology Legal Landscape in Article for OneTrust DataGuidance Meghan O'Connor and Kiana Baharloo Write Article About Washington's My Health My Data Act Published in Lexis Practical GuidanceMeghan O'Connor and Kiana Baharloo Write Article for Privacy & Cybersecurity Law Report About My Health My Data Act Meghan O'Connor Writes Security Magazine Article About Risks Associated with AI Use in Healthcare Meghan O'Connor, Sarah Erdmann and Simone Colgan Dunlap Outline Implications of HIPAA-Related Settlement in Article for Journal of Health Care ComplianceMeghan O'Connor, Simone Colgan Dunlap, Sarah Erdmann and Kaitlyn Fydenkevez Author ABA Article About New Reproductive and Sexual Health Privacy law and Its Potential Broad Applicability and Operational Challenges Million Dollar Maybe: Enforcement of Cures Act Information Blocking Prohibitions Begins Nearly Half of States Have Now Adopted NAIC Model Bulletin on Insurers' Use of AI New York Cybersecurity Regulation Requires Submission of Compliance Certification or Acknowledgement of Noncompliance Next Week New York DFS Cybersecurity Regulation Outlines Actions with High ROI Ninth Circuit Affirms Dismissal of Complaint Against Facebook for Collection of Browsing Data Ninth Circuit Rejects Article III Standing Argument for BIPA Claims No AI Moratorium for Now, but What Comes Next? OCR is Making a List, Checking it Twice, Gonna Find Out Who Has Not Been Complying with HIPAA OCR Provides HIPAA Research Clarifications: Remote Access and Authorization for Future Use of Protected Health Information One Is the Loneliest Number: Alabama Becomes the Final State to Pass Data Breach Notification Law Part 2 Modernization Underway: Revised Rule Released While We Await CARES Act Rulemaking Planning for Preparedness and Response: COVID-19 Response for the Health and Life Sciences Industry Please Hold (For No Longer Than Fifteen Minutes): New Customer Service Requirements for AI Chatbots Privacy and Cybersecurity Considerations and Opportunities Related to COVID-19 Privacy and Security Considerations for Telehealth Use During COVID-19 Public Health Emergency Privacy Priorities for 2024 (and Beyond) Privacy Update: A Busy Second Quarter Recalculating the Route: New Health Plan Privacy Requirements Recent Updates in Data Privacy & Security for Health Care Entities Recent Updates: Data Privacy & Security for Health Care Entities Summer 2022 SEC Rules Impose New Four-Day Reporting Requirements for Cybersecurity Incidents Seventh Circuit Narrows BIPA Healthcare Exemption: Key Takeaways from Clements v. Gunnar OptiksSouth Dakota Officially the 49th State to Pass Data Breach Notification Law State Privacy Enforcement Heats Up: Key Actions and Compliance Trends Every Business Needs to Know States Adopt NAIC Model Bulletin on Insurers' Use of AI Substance Abuse Disorder Records (42 CFR Part 2) Final Rule Is Here! Substance Abuse Disorder Records (42 CFR Part 2) Proposed Rulemaking Works Toward HIPAA Alignment Summer Consumer Health Data Privacy Legislation Happened So Fast Takeaways from First Washington My Health My Data Act Complaint Texas Attorney General Obtains Settlement of Alleged False and Misleading Statements About Healthcare Artificial Intelligence Product Accuracy The Patient Who Cried "Data Breach": Actual Data Breach Required, but End-of-Life Software Risk Remains Trump Administration Rescinds HHS Guidance on Privacy of Gender Affirming Care Data Trump Reverses Key Biden-Era Cyber Directives: Important Updates to Federal Cybersecurity Priorities Virginia's New Sweeping Reproductive and Sexual Health Privacy Law May Affect All Companies Doing Business in the State Warning of Increasing and Imminent Threat of Ransomware to Health Care Industry Warning! ChatGPT Exploit Used by Threat Actors in Cyber Attacks Washington Poised to Transform Consumer Health Data Landscape with Passage of My Health My Data Act Who Has to Prove Your Clinical AI Isn't Biased? California Splits the Duty Winter Blues Client Alert Series: Privacy Concerns in the Collection and Use of Biometric Data Wisconsin Legislature Amends Emergency Detention Statute With CCPA in Effect, What Do Health and Life Sciences Entities Need to Know? And How Does the New Amendment Affect You? With CCPA in Effect, What Does the Financial Industry Need to Know to Comply? With CCPA in Effect, What Does Your Business Need to Know to Comply? Work From Home Presents Privacy and Security Considerations for Research and Higher Education Institutions