Practice Areas
Partner Edward G. Zacharias is the managing partner of McDermott’s Boston office. He represents clients across the healthcare industry and beyond on healthcare compliance and transactional matters. He is a Certified Information Privacy Professional (CIPP/US) and advises healthcare providers, insurers, health information technology and digital health companies, pharmacies, drug and device manufacturers, life sciences companies and health services vendors on a range of information privacy and cybersecurity laws, including the Health Insurance and Portability and Accountability Act (HIPAA), 42 C.F.R. Part 2, the California Consumer Privacy Act and multiple other privacy and data security regimes.
Ed has been deeply involved with helping clients from across the technology and healthcare spectrum in their response efforts related to the COVID-19 pandemic. These clients range from large multi-national technology companies, to digital health services platforms, to electronic health record vendors, to healthcare providers. Ed advises these organizations on the use of technologies to facilitate communications among providers and patients, and related privacy, cybersecurity, telehealth, medical device and other legal considerations related to such use. Ed also advises organizations related to the donation of software, hardware, personnel and other products and services to assist in efforts to ramp up production of vitally-needed medical equipment and supplies in response to the coronavirus pandemic.
View more at: https://www.mwe.com/en/team/z/zacharias-edward-g
Work Highlights
Advised a Fortune 20 company establish a comprehensive HIPAA compliance program and data use strategy related to its entrance into the healthcare market as a provider of healthcare services
Advised a large, publicly traded social media platform on a variety of COVID-19 related initiatives involving global privacy, cybersecurity, telehealth, medical device and other legal considerations
Served as lead counsel to a health system with over 500 clinical sites of service in responding to ransomware attack, including coordinating legal and compliance advice, cybersecurity and forensics teams, media response, communications with regulators and ransom negotiations with threat actor