Cynthia J. Larose
Member / Co-Chair, Privacy & Cybersecurity Practice
+1.617.348.1732
Cynthia is a highly regarded authority in the privacy and security field and a Certified Information Privacy Professional (CIPP). She handles the full range of data security issues for companies of all sizes, from start-ups to major corporations. Cynthia is masterful at conducting privacy audits; crafting procedures to protect data; advising clients on state, federal, and international laws and regulations on information use and data security; helping organizations respond to breaches; and planning data transfers associated with corporate transactions. She is an in-demand media commentator and speaker on privacy and cybersecurity issues.
Cynthia is Co-Chair of the firm's Privacy & Cybersecurity Practice, a Certified Information Privacy Professional-US (CIPP-US), and a Certified Information Privacy Professional-Europe (CIPP-E).
She represents companies in information, communications, and technology, including e-commerce and other electronic transactions. She counsels clients through all stages of the “corporate lifecycle,” from start-ups through mid- and later-stage financings to IPO, and has broad experience in technology and business law, including online contracting issues, licensing, domain name issues, software development, and complex outsourcing transactions. She is also a key contributor to MintzEdge, an online resource for entrepreneurs that includes useful tools and information for starting and growing a company.
Cynthia has extensive experience in privacy, data security, and information management matters, including state, federal, and international laws and regulations on the use and transfer of information, behavioral advertising, data security breach compliance and incident response, data breach incident response planning, as well as data transfers in the context of mergers and acquisitions and technology transactions.
She conducts privacy audits and risk assessments to determine data and transaction flow and to assess privacy practices, and assists with drafting and implementation of privacy policies and information security policies and procedures and monitoring of privacy “best practices” across all levels of the enterprise.
She is a frequent speaker on privacy issues at conferences and media appearances and presents privacy awareness and compliance training seminars to client companies.
During law school, she was editor-in-chief of the Probate Law Journal.
viewpoints
Preparation for 2024 Fiscal Year-End SEC Filings and 2025 Annual Shareholder Meetings
December 17, 2024 | Advisory | By Anne Bruno, Daniel T. Kajunski, Melanie Ruthrauff Levy, Page R. Hubben, David Adams, Joanne Hawana , Jacob Hupart, Cynthia Larose, Breton Leone-Quick, Benjamin Zegarelli, Christopher Buontempo
An analysis of the regulatory developments that impact public companies as they prepare for their fiscal year-end filings with the Securities and Exchange Commission (SEC) and their annual shareholder meetings. This memorandum discusses key considerations to keep in mind as you embark upon the year-end reporting process in 2025.
Delaware’s Consumer Privacy Law is Right Around the Corner
December 13, 2024 | Blog | By Michael Katz, Cynthia Larose, Paty Garza Gonzalez
Everything you need to know about the Delaware Personal Data Privacy Act as it becomes effective on January 1, 2025. Here's what impacted companies need to gear up and prepare for.
Nebraska’s Consumer Privacy Law Takes Effect Soon and Targets Businesses Selling Personal Data
November 26, 2024 | Blog | By Michael Katz, Cynthia Larose, Paty Garza Gonzalez
The Nebraska Data Privacy Act (or NEDPA) becomes effective on January 1, 2025. This relatively short period between signature and effective date left little time for impacted companies to prepare; however, Nebraska’s approach to applicability criteria has cast a specifically tailored net focused on businesses selling personal data of Nebraska residents.
Just Around the Corner, Iowa’s Consumer Privacy Law Taking Effect
November 19, 2024 | Blog | By Michael Katz, Cynthia Larose, Paty Garza Gonzalez
Iowa's consumer privacy law is taking effect soon. Learn more about the Iowa Consumer Data Protection Act or “IACDPA” which becomes effective on January 1, 2025.
Consumer Privacy Laws are Taking Effect Across the Nation – Are You Ready?
October 30, 2024 | Blog | By Michael Katz, Cynthia Larose, Paty Garza Gonzalez
Learn about the Oregon Consumer Privacy Law which took effect in July of 2024.
SEC Issues New Statement on Cybersecurity Incident Disclosure
June 3, 2024 | Alert | By Daniel T. Kajunski, Anne Bruno, Cynthia Larose, Raven Sun
Read about a recent statement from Erik Gerding, Director of the SEC’s Division of Corporation Finance, which provided clarification regarding the disclosure of cybersecurity incidents by reporting companies.
Maryland Enacts Sweeping Privacy Reform
May 16, 2024 | Blog | By Cynthia Larose, Jon Taylor
The push by U.S. states to pass data privacy laws continues with Maryland being the 18th state to join their ranks. However, Maryland has taken a more stringent and comprehensive approach than many of its peers
Maryland Says “Don’t Mess with Kids”
May 16, 2024 | Blog | By Cynthia Larose, Jon Taylor
As U.S. states continue to pass data privacy legislation, Maryland has gone above and beyond in signing both the Maryland Online Data Privacy Act of 2024 (MODPA) and the Maryland Age Appropriate Design Code (HB 603/SB 5712023) into law on May 9, 2024. The Kids Code will go into effect in October and the MODPA will go into effect one year thereafter.
American Privacy Rights Act – Another Shot at a Comprehensive Federal Privacy Law
April 17, 2024 | Blog | By Cynthia Larose, Christopher Buontempo
Will the U.S. finally join most developed nations and pass a comprehensive federal privacy law? Some believe this may be the year that the U.S. does just that.
New Jersey Adopts a Comprehensive Data Privacy Law
April 15, 2024 | Blog | By Cynthia Larose, Jon Taylor
This post provides the details and information you and your business need to know about the New Jersey Privacy Act (NJPA), signed into law by Governor Phil Murphy.
News & Press
The Best Lawyers in America 2025 Recognizes 184 Mintz Attorneys across 56 Practice Areas
August 15, 2024
187 Mintz attorneys have been recognized by Best Lawyers® in the 2025 edition of The Best Lawyers in America©. Notably, three Mintz attorneys received 2025 “Lawyer of the Year” awards, and 64 firm attorneys were included in the 2025 edition of Best Lawyers: Ones to Watch.
Mintz is pleased to announce that 120 firm attorneys have been recognized as leaders by Best Lawyers® in the 2024 edition of The Best Lawyers in America©.
Law360 published an article written by Privacy & Cybersecurity Chair Cynthia Larose, and Associates Michael Katz and Elana Lerner Brockman, which analyzes the Florida Digital Bill of Rights.
Massachusetts Lawyers Weekly Names Cynthia Larose a Go-To Lawyer for Cybersecurity/Data Privacy
October 31, 2022
Mintz is pleased to announce that Massachusetts Lawyers Weekly has recognized Cynthia Larose on its 2022 list of "Go To Cybersecurity/Data Privacy" lawyers.
First California Privacy Penalty Flags Consumer Data Sales Peril
August 26, 2022
Best Lawyers® recognized 108 firm attorneys in the 2023 edition of The Best Lawyers in America©. Notably, two Mintz attorneys – Poonam Patidar and Scott M. Stanton – received 2023 “Lawyer of the Year” awards, and 28 firm attorneys were included in the inaugural edition of Best Lawyers: Ones to Watch.
Five Mintz Attorneys Recognized as Client Service All-Stars by BTI
February 08, 2022
Québec’s Updated Privacy Law Complicates Cross-Border Data Flows
November 12, 2021
Complying With NYC’s New Biometrics Law
August 17, 2021
NY Cybersecurity Rules Pack Wallop In Enforcement Debut
August 19, 2020
Consent is Key to Avoiding Child Privacy Class Actions
June 15, 2020
Assessing Existing Privacy Policies and Practices
May 21, 2020
Protect Your Newly Remote Team From Cyberthreats
April 2, 2020
A New California Privacy Law Could Change Everything for Drone Operators in the U.S.
January 3, 2020
Mintz Recognized by Chambers USA 2019
April 26, 2019
Cynthia Larose Named a National Law Review "Go-To Thought Leader"
December 27, 2018
Sweeping Data Privacy Bill Approved In California
June 28, 2018
Chambers USA 2018 Ranks Mintz Attorneys & Practices
May 03, 2018
Mintz Honored by JD Supra's 2018 Reader's Choice Awards
March 19, 2018
Mintz’s Cynthia Larose Named “Top 50 Most Powerful Women in Technology” by National Diversity Council
October 16, 2017
New Yorkers Want to Know: What’s your cybersecurity plan?
August 29, 2017
Want to improve risk management? Do the basics
March 9, 2017
Lessons for Connected Devices From the FTC’s Warning Against Unexpected Data Collection
February 22, 2017
The Most Significant Data Breaches Of 2016
December 22, 2016
Getting Your Firm Beyond the Breach
March 1, 2016
Mintz Represents Time Inc. in Acquisition of Cozi Inc.
June 19, 2014
Events & Speaking
Hot Topics in White Collar Crime and Government Investigations: Considerations for Corporate Counsel
Association of Corporate Counsel, San Diego and Mintz
Virtual Event
Privacy Shield Shattered & the SCCs in Peril: Understanding the Schrems II Decision (and What to Do Next)
View the Webinar Recording
Compliance Solutions Strategies Spring 2020 Conference
The Ritz-Carlton, Sarasota, Florida
The Concept of “Reasonable Security” – What is it and how do you get there?
View the Webinar Recording
Coronavirus (COVID-19): Managing the Privacy & Cybersecurity Risks
View the Webinar Recording
The Office of the General Treasurer and Rhode Island Health and Educational Building Corporation's Joint Municipal Training and Education Conference
Cybersecurity
Greenwich, RI
Health Care & Cybersecurity: A Powerful Combination
ML Strategies, 701 Pennsylvania Ave, NW, Suite 900, Washington, DC 20004
The Third Annual Boston Conference on Cyber Security (BCCS 2019)
Boston College, Gasson Hall, Room 100, 140 Commonwealth Avenue Chestnut Hill, MA
Cybersecurity Best Practices for Legal Services Providers 2019
Practising Law Institute
PLI New York Center, 1177 Avenue of the Americas, (2nd floor), entrance on 45th Street, New York, New York
Legal Issues in Museum Administration 2018
American Law Institute Continuing Legal Education (ALI CLE)
Revere Hotel Boston Common 200 Stuart Street Boston, MA
2018 Cyber Liability Conference
Mohegan Sun Resort & Convention Center 1 Mohegan Sun Blvd Uncasville, CT
Higher Education Legal Conference
Boston Bar Association
Sheraton Boston Hotel 39 Dalton Street Boston, MA
The Second Annual Boston Conference on Cyber Security (BCCS 2018)
Boston College
Gasson Hall, Room 100 140 Commonwealth Avenue Chestnut Hill, MA
Increased Scrutiny by Regulators of Cybersecurity
The New England Broker/Dealer and Investment Adviser Association
Boston, MA
Hot Topics in Global Healthcare Information Privacy, Data Protection and Security
IAPP KnowledgeNet
Boston, MA
Not If, But When: Cyber Security for Companies in an Age of Inevitable Hacks, Attacks & Breaches
National Association of Corporate Directors, New England Chapter
Newton Marriott Hotel, Newton, MA
Cynthia is a highly regarded authority in the privacy and security field and a Certified Information Privacy Professional (CIPP). She handles the full range of data security issues for companies of all sizes, from start-ups to major corporations. Cynthia is masterful at conducting privacy audits; crafting procedures to protect data; advising clients on state, federal, and international laws and regulations on information use and data security; helping organizations respond to breaches; and planning data transfers associated with corporate transactions. She is an in-demand media commentator and speaker on privacy and cybersecurity issues.
Recognition & Awards
BTI Consulting Group Client Service All-Star (2022)
Best Lawyers in America: Privacy and Data Security Law (2018 – 2025)
Massachusetts Lawyers Weekly: Go To Cybersecurity/Data Privacy Lawyer (2022, 2024)
Top Author for Cybersecurity, JD Supra’s Readers' Choice Awards (2018 - 2021)
Chambers USA: Noted Practitioner, Nationwide – Privacy & Data Security (2018 – 2019)
National Law Review: Go-To Thought Leadership Award, Cybersecurity (2018)
Chambers USA: Nationwide – Privacy & Data Security (2010 – 2016)
Chambers Global: Privacy & Data Security (2011 – 2012, 2016 – 2017)
National Diversity Council: Top 50 Most Powerful Women in Technology (2016)
Woman of Technology 2001 by Women in Technology, Inc.
Two Thousand Notable American Women (2001)
Women's Business Boston: Top 10 Women Lawyers in Boston (2005)
Women’s Business Boston: Top 10 Corporate Lawyers in Boston (2009 – 2010)
Named a "Rising Star" by Boston Magazine (2011)
Leila Josephine Robinson Award, Boston University Woman's Law Association (2010)
Boston Digital Industry News: Best General Lawyer for a High-Tech Firm
Massachusetts Super Lawyers: Rising Star – Information Technology/Outsourcing (2005)
Cynthia is a highly regarded authority in the privacy and security field and a Certified Information Privacy Professional (CIPP). She handles the full range of data security issues for companies of all sizes, from start-ups to major corporations. Cynthia is masterful at conducting privacy audits; crafting procedures to protect data; advising clients on state, federal, and international laws and regulations on information use and data security; helping organizations respond to breaches; and planning data transfers associated with corporate transactions. She is an in-demand media commentator and speaker on privacy and cybersecurity issues.
Involvement
- Member, International Association of Privacy Professionals
- Member, Computer Law Association
- Member, Federal Communications Bar Association
Recent Insights
Preparation for 2024 Fiscal Year-End SEC Filings and 2025 Annual Shareholder Meetings
December 17, 2024| Advisory|
Delaware’s Consumer Privacy Law is Right Around the Corner
December 13, 2024| Blog|
Nebraska’s Consumer Privacy Law Takes Effect Soon and Targets Businesses Selling Personal Data
November 26, 2024| Blog|
