skip to main content


Matthew Fitzsimmons, Former Cigna U.S. Privacy Officer and Lead Cybersecurity Counsel, Joins Firm as Partner

Former Assistant AG at CT Attorney General's Office

May 6, 2019

Shipman & Goodwin LLP today announced that Matthew Fitzsimmons is joining the firm's State Attorneys General and Data Privacy and Protection Practice Groups as a partner in the Hartford office. Fitzsimmons was Cigna Corporation's U.S. Privacy Officer and Lead Cybersecurity Counsel and was formerly Head of its Privacy & Information Protection Compliance Office.

Prior to joining Cigna, Fitzsimmons was an Assistant Attorney General at the Connecticut Attorney General's Office, where he worked for seven years with Connecticut’s immediate past Attorney General George Jepsen and the state’s immediate past Chief Deputy Attorney General Perry Zinn Rowthorn, both of whom joined Shipman & Goodwin in February as the firm launched a State Attorneys General Practice Group. Fitzsimmons will be involved with all aspects of the State Attorneys General practice, with an emphasis on data privacy and data protection matters. He will also work on behalf of clients as a member of the Data Privacy and Protection Practice Group.

At Cigna, Fitzsimmons handled complex privacy and information protection matters spanning all state and federal privacy laws and led the firm's incident response team in investigations, breach notification and incident management. He also managed the enterprise's privacy training program and oversaw implementation of privacy-related legislation and regulation. Fitzsimmons recently managed the data privacy issues arising from the Cigna-Express Scripts merger, focusing on both pre-close data sharing matters and post-close integration efforts.

"Matt understands the privacy issues across all business sectors as well as anyone in the country," said Jepsen. "He is a thoughtful problem solver. One of his best attributes is his ability to lead bipartisan coalitions to tackle complex issues. He is admired by state attorneys general across the country and respected by privacy leadership at major corporations as well. Perry and I are thrilled Matt is joining us at Shipman & Goodwin."

As Assistant Attorney General, Fitzsimmons headed the Privacy and Data Security Department, the first department of its kind established by a state attorney general, as the lead attorney on all matters involving data security and privacy, including data breaches. He led numerous high-profile multistate investigations and negotiated settlements involving privacy, data security and consumer protection issues with leading technology, financial and health care firms. He established close working relationships with the privacy regulators in other states and served as lead attorney and negotiator for the largest data privacy multistate investigations in the country. He also served as co-lead counsel in the first-ever state attorney general enforcement action for alleged violations of HIPAA.

"One of the things I most admired about working with George and Perry was their forward-thinking ability to identify issues before they arose rather than just being reactive," said Fitzsimmons. "The State Attorneys General and Data Privacy and Protection Practice Groups act proactively on behalf of clients by reviewing their privacy and data protection programs before regulators get involved. At the same time, we are able to rapidly respond to large data breaches that require prompt outreach and discussions with regulators across the country. George and Perry bring a practical approach and enormous institutional knowledge to clients and I look forward to working by their side once again."

Fitzsimmons earned his B.A. magna cum laude from the University of Hartford and his J.D. (with honors) from the University of Connecticut School of Law. He served as Adjunct Professor at the University of Connecticut School of Law, where he taught oral advocacy and brief writing as part of the school's Moot Court program.

"We are excited to add Matt to our interdisciplinary team of experienced privacy and data security attorneys to advise our clients, whether it involves compliance, investigations or any related privacy and data security matter," said Alan E. Lieberman, Managing Partner of Shipman & Goodwin. "Matt's experience in both government and in a major corporation makes him invaluable in understanding the issues from multiple perspectives."

The State Attorneys General Practice Group represents clients in the full range of investigations and enforcement actions brought by state attorneys general throughout the country, including government inquiries, investigations, litigation and settlement monitoring. The practice represents businesses of all sizes and individuals in critical areas such as data privacy, consumer protection, antitrust and environmental regulation, among others.

The Data Privacy and Protection Practice Group assists clients with the critical responsibility of securing data, complying with federal, state and international law for the proper use and disclosure of data and responding to breaches and other security incidents. The practice provides representation during breach investigations before the Department of Health & Human Services (HHS), the Office for Civil Rights (OCR), the Federal Trade Commission (FTC), state attorneys general and state departments of insurance.

© Shipman & Goodwin LLP 2020. All Rights Reserved.