Amy provides day-to-day product counseling and advises on data strategies. She works with clients across industries – spanning the health care/life sciences industries to big tech, finance, media and consumer products – to help them leverage and transfer data in a compliant way. She also partners with multi-disciplinary teams to advise on product development, digital advertising, artificial intelligence/machine learning and other emerging technologies to incorporate privacy-by-design and security-by-design principles. Her pragmatic approaches to managing data enable clients to achieve their business objectives while remaining compliant with their dynamic regulatory environment.

In addition to regulatory and product counseling, Amy also drafts and negotiates complex data arrangements and manages privacy and cyber risks in corporate transactions and outsourcing. She advises clients on effective due diligence strategies when vetting risks of purchasing and disclosing data and regularly partners with transaction co-counsel to evaluate the regulatory impact of specific privacy and cybersecurity matters, including government investigations and security breaches. She also companies on their legal obligations with respect to supply chain management and third-party risk management.

Show Less

• Advised on privacy and data security considerations in a multi-jurisdictional pharmaceutical clinical trial, including negotiations with clinical research organizations, sharing of data with research institutions and preparing contracts and informed consent documents
• Advised healthcare client on applicability of general privacy and data security laws (including the CCPA, GDPR, COPPA and state data security laws) to collection of data through non-traditional means, including how such laws impact requirements under HIPAA and state health information privacy laws
• Advised insurance and financial service clients on applicability of GLBA, FCRA and state privacy laws to the digital transformation of their traditional businesses and growth of new lines of business involving the collection and use of consumer data, modeling and algorithm development
• Vetted privacy and security risks in a private equity fund’s multimillion-dollar acquisition of four national data brokers, and advised on post-closing implementation of privacy and security controls
• Handled responses to numerous incidents involving the compromise of personal data, including overseeing the forensic investigation into the incidents, advising on legal obligations, preparing a notification and communication program and recommending appropriate mitigation measures
• Acted as an interim privacy officer for a large regional hospital system

Show Less

• The Legal 500, Rising Star, 2020
• Super Lawyers, Rising Star, 2018-2024

Show Less