Dianne advises a variety of health care clients on a broad range of issues, including licensure, regulatory, contractual, and risk management matters, and patient care. As former in-house counsel to an academic medical center, a large part of her practice involves counseling researchers and research sponsors in matters related to FDA and OHRP regulated clinical research, including patient consent, access to and use of tissue and associated patient information, and the Institutional Review Board process.
She also counsels health care clients and other business entities on a broad range of privacy and data security issues, including the HIPAA Privacy Rule and Security Standards, including requirements under HITECH and the HIPAA Omnibus Rule, 42 CFR Part 2, and state-imposed medical privacy laws. She regularly assists clients with data breach response and mitigation, the implementation of HIPAA-mandated policies and procedures, privacy audits, third-party requests for information, and review of HIPAA-related contracts and forms. She has successfully defended clients in both civil and criminal HIPAA enforcement actions and regularly assists clients with the management of data breaches and other losses of protected health information.
Before joining Mintz, Dianne was an associate staff attorney at the Lahey Clinic, where she provided general counsel services to medical, professional, and administrative staff. She also served as counsel to the Institutional Review Board, the Ethics Committee, the Intellectual Property and Technology Transfer Committee, and the Genetics Advisory Board. Before joining the Lahey Clinic’s legal staff, she worked in the research administration department. Her responsibilities included drafting a regulatory compliance manual detailing laws of concern in basic, clinical, and animal research, continually reviewing relevant regulations to ensure compliance for institutional programs, and researching and advising clients on a broad range of regulatory matters.
Dianne was the first Suffolk University law student to graduate with a concentration in Health Care and Biomedical Law. She formerly served as an adjunct professor at Stonehill College, teaching an undergraduate Health Care Law course.
Dianne is a contributor to the Mintz Health Law & Policy Matters blog as well as the Privacy & Security Matters blog.
Dianne is a long-standing partner to our agency and her in-depth knowledge of our mission is key to our solutions.
- Health Care Client, Chambers USA 2024
Experience
- Provided strategic counsel to a start-up medical application company that has devised a method to detect mild cognitive impairment as a precursor to more significant cognitive diseases.
- Counseled a publically traded medical device company on risk management advice and helped them manage multiple significant adverse events following suspension of trial by the FDA.
- Assisted our client, a manufacturer of smart, wireless prescription bottles, with structuring their patient interface to be consistent with privacy and data security laws and other regulatory issues.
viewpoints
HIPAA and Other Privacy Considerations at Play when Building a Health App
November 8, 2017 | Blog | By Dianne Bourque, Cynthia Larose
Building a Health App? Part 6: HIPAA and Other Privacy and Security Considerations
October 25, 2017 | Blog | By Dianne Bourque
The HIPAA “Wall of Shame” is Now Easier to Navigate
July 31, 2017 | Blog | By Ryan Cuthbertson, Dianne Bourque
WannaCry Ransomware Attack Updates -- Europol Says "Patch Before Monday"
May 14, 2017 | Blog | By Cynthia Larose, Dianne Bourque
Ransomware Attack – Quick Facts
May 13, 2017 | Blog | By Dianne Bourque, Cynthia Larose
Advice to Healthcare Providers on Ransomware from the Head of the FBI
March 10, 2017 | Blog | By Dianne Bourque, Cynthia Larose
The Newly Updated Common Rule is Here – And On a Collision Course With the 21st Century Cures Act
January 26, 2017 | Blog | By Dianne Bourque
HHS Publishes Guidance on HIPAA and Cloud Computing
October 19, 2016 | Blog | By Dianne Bourque
The Emerging HIPAA Security Threat Presented by . . . Pikachu?
July 21, 2016 | Blog | By Dianne Bourque
“Your Money or Your PHI”: OCR Releases Guidance on Ransomware
July 12, 2016 | Blog | By Dianne Bourque
News & Press
The Best Lawyers in America 2025 Recognizes 184 Mintz Attorneys across 56 Practice Areas
August 15, 2024
187 Mintz attorneys have been recognized by Best Lawyers® in the 2025 edition of The Best Lawyers in America©. Notably, three Mintz attorneys received 2025 “Lawyer of the Year” awards, and 64 firm attorneys were included in the 2025 edition of Best Lawyers: Ones to Watch.
Say Hello to the Company Shrink
July 22, 2024
Mintz announced today that 42 of its practices and 83 of its attorneys earned recognition in the 2024 edition of Chambers USA, a guide to the country’s leading law firms. Of those included in the guide, 18 attorneys and seven practice areas were awarded Chambers’ highest ranking, Band 1. The firm obtained new listings in three practice areas and 10 of its lawyers were recognized for the first time.
In a Report on Patient Privacy article, Members Dianne Bourque and Lara Compton shed light on the termination of HIPAA enforcement discretions post-COVID-19. The HHS Office for Civil Rights officially reinstated its authority over telehealth on August 9, necessitating a rapid reassessment of compliance for covered entities and business associates.
Mintz is pleased to announce that 120 firm attorneys have been recognized as leaders by Best Lawyers® in the 2024 edition of The Best Lawyers in America©.
BOSTON –Mintz announced today that 39 of its practices and 81 of its attorneys earned recognition in the 2023 edition of Chambers USA, a guide to the country’s leading law firms.
HHS Proposes Rule Shoring Up HIPAA To Protect Reproductive Health Data, Including Around abortions
April 12, 2023
Health Care Dive interviewed Member Dianne Bourque about the Biden administration's proposed new rule that would ban health care entities from sharing patient information.
2023’s Largest Health Data Breach So Far Brings Legal Flurry
March 14, 2023
Member Dianne Bourque spoke to Bloomberg Law about Regal Medical Group's cyberattack that resulted in the exposure of over 3 million patients' health information.
Axios interviewed Member Dianne Bourque about health privacy in the post-Roe digital age.
Boston Legal Teams Brace For Wave Of Uncharted Battles Over Abortion
September 2, 2022
Best Lawyers® recognized 108 firm attorneys in the 2023 edition of The Best Lawyers in America©. Notably, two Mintz attorneys – Poonam Patidar and Scott M. Stanton – received 2023 “Lawyer of the Year” awards, and 28 firm attorneys were included in the inaugural edition of Best Lawyers: Ones to Watch.
Meta’s Pixel Cases Stir Trouble for Health Site Tracking Tools
August 10, 2022
HIPAA Faces Test in New Abortion Reality
August 10, 2022
Five Mintz Attorneys Recognized as Client Service All-Stars by BTI
February 08, 2022
Medicare AI Will Infer Race to Close Health Equity Gap
August 5, 2021
Corporate Secrets at Risk in Hack of U.S. Courts Documents
January 8, 2021
Amazon’s Pharmacy Venture Opens New Privacy, Security Law Risks
November 30, 2020
Hospital Ransomware Attacks Spotlight Need for Security Steps
November 4, 2020
Fertility Tracking Apps Get Tough Look From States Over Privacy
October 14, 2020
The Virus Shot Goes in Your Arm, but Where Does Your Data Go?
September 24, 2020
Mintz Advises Partners In Health on Massachusetts COVID-19 Community Tracing Collaborative
April 08, 2020
Trump Keeps Touting an Unproven Coronavirus Treatment. It’s Now Being Tested on Thousands in New York
March 31, 2020
Does Epic’s CEO Have A Point On Privacy?
February 24, 2020
On Bloomberg Television, Mintz Member Dianne Bourque Discusses Google’s Deal with Ascension Hospitals
November 19, 2019
The full show is available here, and the segment featuring Ms. Bourque runs from 29:47 - 35:15.
Google Is Slurping Up Health Data—and It Looks Totally Legal
November 18, 2019
Don’t Forget About State Laws on HIPAA Breaches
May 10, 2019
Anthem Settlement Holds Lessons on Data Breaches, Costs
December 1, 2018
Obamacare Enrollment Data Breach May Trigger Privacy Probe
October 24, 2018
Cyberattacks Targeting Computer Chips May Expose Health-Care Data
January 19, 2018
Mintz Represents Myriad Genetics in Acquisition of Assurex Health
September 08, 2016
Nurse's Gory Tweets Leave Privacy Attys Gobsmacked
August 9, 2016
Tell Gun-Toting Patients That New HIPAA Gun Rule Isn’t about Them
January 18, 2016
Events & Speaking
Which Hat Are You Wearing? HIPAA and Privacy in Value Based Care
ABA National Managed Care Institute 2024
New York, New York
Clinical Trial Risk Management during COVID-19
Advanced Medical Technology Association's Virtual MedTech Conference
Online Event
Everything Life Sciences Companies Need to Know to Navigate the COVID-19 Pandemic
View the Webinar Recording
Coronavirus (COVID-19): Managing the Privacy & Cybersecurity Risks
View the Webinar Recording
Telehealth: Keeping Up with the Fast-Moving Federal and State Regulatory Landscape During the COVID-19 Pandemic
View the Webinar Recording
Healthcare Law & Compliance Institute: Taming Technology
How to Maximize Innovation While Minimizing Risk
Amelia Island, Florida
Health and Hospital Law: MCLE BasicsPlus
MCLE Conference Center, 10 Winter Place, via Winter Street
Health Care & Cybersecurity: A Powerful Combination
ML Strategies, 701 Pennsylvania Ave, NW, Suite 900, Washington, DC 20004
MCLE New England's 20th Annual Hospital & Health Law Conference 2019
Conflict of Interest and Research Compliance
Ten Winter Place, Boston
Employee Benefits & Healthcare Congress
Employer Healthcare & Benefits Congress (EHBC)
Orange County Convention Center, 9800 International Drive, Orlando, FL
8 Weeks Until the HIPAA Omnibus Rule Compliance Date - How to Make the Most of Your Time
Mintz Levin Health Beat Webinar Series
Webinar
Recognition & Awards
Chambers USA: Massachusetts – Healthcare (2015-2017; 2021-2024)
BTI Consulting Group Client Service All-Star (2022)
Featured in Best Lawyers in America: Health Care Law (2020-2025)
Involvement
- Regular guest lecturer, Cybersecurity Policy & Governance Program, Boston College Woods College of Advancing Studies