Colin J. Zick

Colin J. Zick has no picture

Colin Zick’s practice is focused on health care and compliance issues, and often involves the intersection of those two subjects in administrative proceedings or litigation.  He frequently counsels clients on issues involving health and business information privacy and security (including HIPAA).   His work has had a particular emphasis on compliance issues related to pharmaceutical and medical device companies, hospitals, practitioners (including physicians, dentists, optometrists, psychologists, veterinarians), and provider organizations. This compliance work includes helping clients establish and maintain effective compliance programs. Colin defends clients in disputes alleging kickbacks, overpayments, and billing and coding problems, and represents before various state health care licensing and regulatory entities.

Colin’s practice also includes work on health care transactional matters. These projects include the establishment of joint ventures, the establishment of new entities, drafting and negotiation of employment contracts, and negotiating clinical trial agreements.

Colin’s practice also includes clients in industries beyond health care, ranging from the music industry to Internet start-ups. He has been involved in litigation relating to antitrust and unfair competition claims, and copyright infringement.

Practice Areas

  • Security and Privacy
  • Healthcare
  • Life Sciences

    Additional Practice Areas: Litigation, Business Crimes & Government Investigations, Product Liability & Complex Tort, Medicare Coverage & Reimbursement

Professional Associations

  • New England Council -- Health Care and Technology Committees
  • American Health Lawyers Association, Member (Participant, Fraud and Abuse Enforcement Panel)
  • Health Care Compliance Association, Member
  • American Bar Association, Member
    • Litigation Section
  • Health Law Section
  • Massachusetts Bar Association, Member
  • Boston Bar Association, Member

Education

  • University of Michigan, B.A., Political Science, with highest distinction, Phi Beta Kappa
  • University of Michigan Law School, J.D., cum laude

Bar Admissions

  • Massachusetts
  • New Hampshire
  • U.S. District Court for the District of New Hampshire
  • U.S. District Court for the District of Massachusetts
  • U.S. Court of Appeals, First Circuit
  • U.S. Court of Appeals, Ninth Circuit

For a comprehensive account of Colin's professional experience visit the Foley Hoag Web site.


Posts By This Author

What Facebook's IPO Means for Users

Massachusetts Data Security Law - Contract Grandfather Provision Expires March 1, 2012

Retailer's Request for Zip Code Violated Law, But Generated No Harm

More on Google's Privacy Policy

Google Changes Its Privacy Policies

Jail Time for Man Who Accessed Computer of a Competing Medical Practice

Supreme Court Holds Warrant Required for GPS Tracking

HHS Reports on Breaches of Unsecured Protected Health Information

Medicare Contractors Lag on Information Security

Unite Against the Cyber Enemy: Banks and Others Join Forces

Older Entries

Inside Counsel Magazine Revisits SEC's Cybersecurity Guidance

SEC Issues Guidance On Use of Social Media by Investment Advisers

Did You Know There Is a Congressional Cyber Security Caucus?

"Performing Due Diligence Before Signing a Cloud SLA"

Is Public-Private Information Sharing Needed to Respond to the Massive Increase in Cyber Attacks?

Is Public-Private Information Sharing Needed to Respond to the Massive Increase in Cyber Attacks?

"Once More Unto the Breach, Dear Friends, Once More": The Increasing Recognition of Complexity in Data Breach Response and Reporting

Waiters at High-End Steakhouses Arrested for Stealing Customer Credit-Card Numbers

Facebook Settles FTC Charges that It Deceived Consumers, Agrees to 20 Year Consent Order

Sen. McCain Inserts Cybersecurity Amendment into DoD Authorization Act

Cybersecurity Legislation to Come to Senate Floor in January 2012

"Foreign Spies Stealing US Economic Secrets in Cyberspace"

Data Security Industry Grows Without "Pearl Harbor" Moment

Consumer Response to Data Breach: Let's Sue!

"Securing profits: Venture capitalists betting online security will be big money-maker"

New England-Israel Data Storage & Security Summit-November 14, 2011

Credit Card Replacement Costs and Identity Theft Insurance Are Compensable Damages for Data Breach

"SEC's Corp Fin Staff Attacks Cyber-Security Disclosure"

Report Says Libya Nearly Subjected to U.S. Cyber-Attacks

SEC Publishes Guidance on Cyber Incidents

Microsoft Report Challenges Conventional Wisdom on Cybercrime Losses

Most Recent Sony Breach Illustrates the Cascading Effect of Data Breaches

Upcoming Seminar: "He Posted What? Dealing with Social Media in the Modern Workplace"

Upcoming Webinar: "Data Breaches & Compliance: Understanding The Law and How You Can Prepare"

Advanced Cyber Security Center Launched

More Consumer Data Security and Privacy Legislation Introduced

"What Every In-House Counsel Needs to Know About Data Security and Privacy"

Pulling Out Your Hair Over Wrongfully Disclosed Records?

Changing Tactics in the Cyber Underground

New Database Allows Review of Past History of Data Breaches

HIPAA Breaches Reported to OCR Near 300

Another Big HIPAA Settlement: The UCLA Health System Settles for $865,000

Hackers Hit the Headlines

Analysis of the Supreme Court's Decision Striking Down Vermont Pharmaceutical "Data Mining" Law

Supreme Court Strikes Down Vermont Data Mining Law

Is Teamwork the Answer to Data Security?

2011: The Year of the Breach

What Law Applies In "the Cloud"?

Does Briar Group's Massachusetts Settlement Create a New Legal Standard That Businesses Must Meet to Protect Personal Information?

What Can My Company Do To Fight Cybercrime Collaboratively?

Facebook Posting about Patient=HIPAA Violation=Physician Sanctions

Consumer Class Action Filed Against Sony for Data Breach

Sony Breach Update: The Scope Expands, While Consumers Wait for Answers About How and Why It Happened

EU Chimes in on Sony Data Breach

Is Physician Privacy a Thing of the Past

North Versus South: South Korea Accuses North Korea of Cyberattack

Sony Mega-Breach Spotlights Data "Security" Myths

Big HIPAA Breaches Now Number 265

"Pressure Point: Online Privacy -- Privacy is Potentially a Costly Workplace Issue"

Information Security In the Age of WikiLeaks

White House Releases Framework for National Strategy for Trusted Identities in Cyberspace

Data Security and Privacy for Medical Device, Pharmaceutical and Life Sciences Companies

TripAdvisor Reports Data Breach

Obama Administration Seeks "Consumer Privacy Bill of Rights"

Online Advertising Company Chitikia Enters FTC Consent Agreement for Deceptive "Opt-Out" Policy

Health Net Announces Second Major Breach in Two Years; Creates Potential for Largest Ever Penalty

What Is Inside Mass General's $1 Million HIPAA Settlement?

FTC Red Flags Suits Come to an End as Lawyers and Doctors Are Exempted

Supreme Court Rules Corporations Do Not Have Privacy Rights under FOIA

Compliance Approaches in the Changing HIT Privacy and Security Landscape: How You Can Nurture a Culture of Health Information Security and Privacy

FTC Publishes Copier Data Security Guide

You Call That a Password? Passwords Used to Protect Personal Health Information in Clinical Trials Are Cracked More Than 90% of the Time

HHS Fines Cignet Health $4.3 Million for HIPAA Violations

500 Is a Magic Number: Health Information Breaches Impacting 499 or Fewer Patients Likely Go Uninvestigated By OCR

DHS Updates Its "Handbook for Safeguarding Sensitive PII"

Online Privacy Bills Planned for 2011

Some Tips for Protecting Your Data when Dealing with Vendors

FTC Attorney Conceded Identify Theft Can Happen to Anyone

Mozilla and Google Announce "Do Not Track" Browser Features

Security and Privacy Issues of 2011: How to Stay a Step Ahead of the Coming Wave of Legislation and Self-Regulation

NIST Launches Web Site for National Strategy for Trusted Identities in Cyberspace

U.S. Supreme Court Upholds NASA Background Checks

Apparent HIPAA Violations in Hospital Treating Tucson Shooting Victims

Genetic Privacy Rights Group Publishes Guide to the World's DNA Databases

If You Got a New Smartphone Over The Holidays, Here Are Some Security Issues to Think About

Does the FTC's Report on "Protecting Consumer Privacy..." Apply to Non-Profits?

FTC Red Flags Rule Clarified; Red Flags Enforcement Likely to Begin in 2011

If You Haven't Changed Your Password Since Our Last Blog Entry About Passwords, It's Time You Did

Will 2011 Bring Us "Do Not Track" Legislation?

Tracking Protection to be Included in Internet Explorer 9: Is This the Tipping Point?

FTC Proposes Privacy Framework That Will Impact the Business Model of All Online and Mobile Advertising Companies

FTC Releases Report: "Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers"

Website Privacy Policies - an extensive primer.....

Advocacy Groups File FTC Complaint Over Online Consumer Health Sites and Health-Related Marketing

AMA Adopts Policy on "Professionalism in the Use of Social Media"

California Department of Public Health Issues Privacy Breach Fines to 8 Health Care Facilities

Restricting Employees' Internet Conduct May Violate Federal Labor Law

Connecticut Insurance Commissioner Fines Health Net of Connecticut $375,000 for Information Security Lapses

A Must Read: The Wall Street Journal's "What They Know" Series

Nearly 250,000 Opt Out of Google's Street View in Germany

Will a Smart Card Make Students Smarter or Is It a Dumb Idea?

NIST Releases Guidance On Protecting Our Digital Energy Infrastructure (Or, Is Big Brother in Our Power Lines?)

"Network Analysis" and Privacy: Does Anybody Care?

Gone Baby Gone: More Massachusetts Medical Records Go Missing

Public Discussion on Confidentiality and Privacy Issues Related to Psychological Testing

Patient Privacy Trumps Subpoena in Physician Disciplinary Action

Iranian Journalist Files Suit against Nokia Siemens Networks for Use of Network in Torture

Taking of a Blood Sample and Creation of a DNA Profile Found Not to Be an Unreasonable Search

Balancing Privacy and Security in an Age of Instant, Ubiquitous Communications

HHS Proposes Major Changes to HIPAA Privacy, Security and Enforcement Rules

Compliance Week's "Must-Read: Major HIPAA Changes Out For Comment"

HHS Issues a Notice of Proposed Rulemaking to Modify the HIPAA Privacy, Security, and Enforcement Rules

Connecticut Attorney General Reaches First State HIPAA Settlement with Health Net

TJX Settles Investor Lawsuit Related to Data Breach

CMS Issues Proposed Rules on Hospital Visitors

One More Reason to Secure Your Wireless Network

Is the Smart Money Chasing Privacy and Security?

Medical Groups Challenge June 1 Application of FTC Red Flags Rule

One More Thing to Worry About -- Hard Drives on Digital Copiers

Coming This Month -- Proposed HIPAA Regs!

One Million Impacted by Blue Cross Blue Shield of Tennessee Data Breach: How Do You Remediate on that Scale?

Is the Rejection of Security Advice by Users Really Rational? A Response to Cormac Herley

Update on HIPAA Business Associate Regulations -- OCR Says They Still Aren't Ready, Gives No Date

LifeLock To Pay $12 Million to Settle Charges That Identity Theft Prevention and Data Security Claims Were False

"Data, Data Everywhere" -- Recommended Reading

HHS Reports 35 Breaches Impacting 500 or More People

Deadlines, Deadlines, Deadlines: Three Important Privacy and Security Dates

Doctors and Other Health Care Professionals Challenge Application of FTC Red Flags Rule

Is Your Password Still "123456"? If So, It's Time for a Change

Connecticut AG Opens New Era in HIPAA Enforcement with Health Net Suit

Is the FTC "Moving to a Post-Disclosure Era" for Online Consumer Privacy?

Texas to Destroy 5.3 Million Illegally Obtained Blood Samples

Is Tougher HIPAA Enforcement Finally On Its Way?

HIPAA Breach Notification Made Simple -- Just Fill in the Blanks

Congressional Aide Shares Secret Ethics List With The World

Massachusetts Court Holds Disclosure of Patient Records Does Not Violate HIPAA or State Consumer Statute

FTC to Host Public Roundtables in December to Address Evolving Consumer Privacy Issues

ABA Sues FTC To Stop Application of Red Flag Rules to Lawyers

California Hospital Fined $187,500 For Octuplet Mom Breach

Good News and Bad News: An Employer Is Hiring; It's The HHS Office of Civil Rights!

Lawsuit Challenges Legality of HITECH Act

AMA Adopts Principles on EMR Breach

Bill Seeks Changes Massachusetts Data Security Law

Update on Hackers Ransom Demand for Virginia Prescription Database

Encryption Used By Hackers to Demand Ransom for Virginia Prescription Database

Swine flu and privacy in the workplace

First the Bad News, Your Doctor's Lost His License; Now the Really Bad News: No One's Taking Care of Your Records

Another Day, Another Celebrity's Hospital Record Breached

Data Breach: Not Only Can Happen to You, and Your Competitors (but Now It's Being Publicly Reported)

Lessons from the VA: what you can learn from someone else's problems

$150,000 Penalty for Disclosure of Physician Information

Text of American Recovery and Reinvestment Act, security and privacy provisions

Data Privacy and Security Meets Winnie-the-Pooh: Using Honey Pots to Protect Your Data