Ranked in 2 Practice Areas
1

Band 1

Privacy & Data Security: Privacy

USA - Nationwide

2 Years Ranked

1

Band 1

Privacy & Data Security: Adtech

USA - Nationwide

2 Years Ranked

Ranked in Guides

About

Provided by Mike Hintze

USA

Practice Areas

Mike Hintze is a partner at Hintze Law PLLC and a recognized leader in privacy and data protection law, policy, and strategy. He advises a wide range of companies, industry associations, and other organizations from startups to large global technology companies. With more than 20 years of experience in privacy and data protection, Mike emphasizes pragmatic and actionable advice that enables his clients to meet their objectives while complying with the law and managing risk.

Mike teaches privacy law at the University of Washington School of Law. He has testified before Congress, state legislatures, and European regulators. He is a sought-after speaker and regularly published author.

Career

Mike was previously Chief Privacy Counsel at Microsoft, where, for over 18 years, he counselled on data protection compliance globally and led strategic initiatives on privacy differentiation and public policy. Prior to Microsoft, he was at Steptoe & Johnson LLP and held a judicial clerkship with the Washington State Supreme Court.

Professional Memberships

Mike is a Senior Fellow with the Future of Privacy Forum and has served on advisory boards for the American Law Institute’s Information Privacy Principles, the International Association of Privacy Professionals, Berkeley Center for Law & Technology, and Children’s Advertising Review Unit (CARU).

Publications

“Dramatic Developments in State Regulation of Health Privacy,” American Bar Association — February 25, 2025

“The state of US reproductive privacy in 2025: Trends and operational considerations,” IAPP — January 30, 2025

“New York Legislature Passes Extraordinarily Restrictive Health Data Privacy Bill,” Hintze Law Blog — January 22, 2025

“A Last-Minute Push for a Reproductive Health Privacy Law in Michigan,” Hintze Law Blog — November 19, 2024

“The Washington My Health My Data Act: Not Just Washington (or Health),” California Lawyers Association, Privacy Law Section Journal, vol. 1 — 2024

Blog series on the Washington My Health My Data Act, Hintze Law Blog — 2023

“10 Recommendations for Regulating Non-Identifiable Data,” IAPP, The Privacy Advisor — September 28, 2021

“Can Synthetic Data Help Organizations Respond to 'Schrems II'?” IAPP, Privacy Tech — September 14, 2020

“Does De-Identification Require Consent Under the GDPR and English Common Law?” Journal of Data Protection and Privacy, Vol. 3, No. 3 — 2020

“Automated Individual Decisions to Disclose Personal Data: Why GDPR Article 22 Should Not Apply,” SSRN — July 10, 2020

“Washington Privacy Act: Amendments jeopardize protections for consumers,” Seattle Times — March 4, 2020

“Science and Privacy: Data Protection Laws and Their Impact on Research,” Washington Journal of Law, Technology & Arts — June 19, 2019

“In Life Sciences Research, 'Informed Consent' Isn't Enough,” IAPP, The Privacy Advisor — June 20, 2019

“Privacy Statements Under the GDPR,” Seattle University Law Review — May 22, 2019

“Does Anonymization or De-Identification Require Consent Under the GDPR?,” IAPP, The Privacy Advisor — January 29, 2019

“Data Controllers, Data Processors, and the Growing Use of Connected Products in the Enterprise: Managing Risks, Understanding Benefits, and Complying with the GDPR,” Journal of Internet Law (Wolters Kluwer) — October 5, 2018

“Comparing the Benefits of Pseudonymisation and Anonymisation Under the GDPR,” Journal of Data Protection and Privacy, Vol. 2, No. 2 — December 1, 2018

“Privacy Statements: Purposes, Requirements, and Best Practices,” Cambridge Handbook of Consumer Privacy, et al — March 7, 2017

“Are There Risks of Using Public Clinical Trial Data under GDPR?,” IAPP, The Privacy Advisor — July 12, 2018

“Viewing the GDPR through a De-Identification Lens: A Tool for Compliance, Clarification, and Consistency,” International Data Protection Law, Oxford University Press — February 1, 2017

“In Defense of the Long Privacy Statement,” Maryland Law Review Rev.1044 — February 4, 2017

“Survey of Privacy Law Developments in 2009: United States, Canada and the European Union,” The Business Lawyer — November 2009

“Protecting Data: Security, Minimization and Anonymization,” Ninth Annual Institute on Privacy and Security Law, Volume Two — 2008

“Policies and Practices for Protecting Personal Data: An In-House Perspective,” Information Technology Law Institute Handbook — 2008

“Making Sense of Privacy and Security Laws and Regulations: Selected Developments Over the Last 12 Months,” Eighth Annual Institute on Privacy and Security Law, Volume One — 2007

“Privacy and Commercial Communications,” Proskauer on Privacy: A Guide to Privacy and Data Security in the Information Age, Practising Law Institute — 2006

“Tinkering With the Machinery of Death: Capital Punishment’s Toll on the American Judiciary,” Judicature — April 2006

“Keeping Secrets: The Growing Challenge of Protecting Data in Outsourcing & Service Provider Agreements,” The Journal of the Association of Corporate Counsel — December 2004

“Export Controls on Encryption Software,” Coping with U.S. Export Controls, Practising Law Institute Course Handbook Series — 2000

“Data Privacy: Self-Regulation Works,” New York Law Journal, November 9, 1998.

"The Risks and Myths of E-Mail," New York Law Journal, September 14, 1998

“Sign of the Times: Digital Signatures and Government Regulation,” Information Security — May 1998

"1997 Encryption Legislation: Industry Shifts Focus from Export Liberalization to Domestic Controls," High-Tech Industry — February 1998

"Government Regulation of Encryption Increases as International Coordination of Policy Is Deemed Necessary," High-Tech Industry — December 1997

"United States Government Policy on Encryption Technology," Computer & Telecommunications Law Review — 1997

"Canadian Export Controls on Encryption Products and Technology," ABA Canadian Law Newsletter — 1997

"Towering Over Babel: A Guide to Global Encryption Policies," Security Management — May 1997

"The Cost of Retaining the Death Penalty: Some Lessons from the American Experience," South African Law Journal — 1994

"Attacking the Death Penalty: Toward a Renewed Strategy Twenty Years After Furman," Columbia Human Rights Law Review — 1993

Expert in these Jurisdictions

Washington, New York

Chambers Review

Provided by Chambers

Chambers Guide to the USA

Privacy & Data Security: Privacy - USA - Nationwide

1
Band 1
Individual Editorial
Mike Hintze is highly regarded for his top-level experience of in-house data security in the technology sector, which he brings to private practice.

Privacy & Data Security: Adtech - USA - Nationwide

1
Band 1
Individual Editorial
Mike Hintze is highly regarded for his top-level experience of in-house data security in the technology sector, which he brings to private practice.

Strengths

Provided by Chambers

Discover other Lawyers at
Hintze Law PLLC

Provided by Chambers
Filter by
Band

Texas

Healthcare

Mason Fitch
Mason Fitch
Associates to watch

USA - Nationwide

Privacy & Data Security: Adtech

Mike Hintze
1
Mike Hintze
1
Band 1
Privacy & Data Security: Privacy

Mike Hintze
1
Mike Hintze
1
Band 1
Susan Hintze
2
Susan Hintze
2
Band 2
Sam Castic
5
Sam Castic
5
Band 5

Key Sectors

Provided by Hintze Law PLLC

Technology, Media and Telecoms (TMT)

Business and Professional Services

Financial Services

Health and Life Sciences