Amy de La Lama

Amy de La Lama
  1. People /

Amy de La Lama

Amy de La Lama

Partner

Amy de La Lama
  1. People /

Amy de La Lama

Amy de La Lama

Partner

Amy de La Lama

Partner

Boulder

Partner; Chair – Global Data Privacy and Security Practice; and Global Practice Group Leader – Technology, Commercial and Government Affairs

T: +1 303 417 8535

VcardVcard
Download PDFDownload PDF
Print
Share

Biography

Amy serves as the Global Practice Group Leader for BCLP’s Technology, Commercial & Government Affairs group as well as the Chair of the Firm’s Global Data Privacy & Security practice.

She has more than two decades of experience advising her clients on global privacy, cybersecurity and artificial intelligence issues, with a specific focus on advising health care clients on these issues.

Amy routinely counsels clients on US consumer privacy laws, HIPAA, emerging litigation and regulatory issues, as well as GDPR and global privacy and data use laws. She assists regularly with transactions involving complex privacy issues, related to health data, ad tech/digital tracking and AI. Amy also is a trusting partner in helping organizations navigate the full life cycle of security incidents and data breaches as well as with breach preparedness and remediation.

Civic Involvement & Honors

  • Chambers USA Nationwide and Chambers Global Guide, Privacy & Data Security
  • The Best Lawyers in America, Privacy and Data Security Law (2023)
  • 5280 Best Lawyers List

Professional Affiliations

  • Certified Information Privacy Practitioner
  • Colorado Bar Association – Member
  • Illinois State Bar Association – Member
She is an incredible attorney, who provides excellent advice no matter how complex the issue.

Chambers USA, Privacy & Data Security 2025

Amy is a frequent speaker and writes extensively on the latest developments in this space and is a member of the International Association of Privacy Professionals (APP).

AI Legislation Snapshot

To help companies achieve their business goals while minimizing regulatory risk, our team actively tracks proposed and enacted AI regulatory bills from across the Unites States to enable our clients to stay informed in this rapidly-changing regulatory landscape.

AI Legislation Snapshot

To help companies achieve their business goals while minimizing regulatory risk, our team actively tracks proposed and enacted AI regulatory bills from across the Unites States to enable our clients to stay informed in this rapidly-changing regulatory landscape.

Admissions

  • Illinois, 2004
  • Colorado, 2001

Education

  • University of Colorado, J.D., Order of the Coif, 2001
  • University of Virginia, B.A., high honors, 1996
  • University of Virginia, B.A., summa cum laude, 1996

Resources

Publications

Speaking Engagements

Related Insights

Insights
Oct 01, 2024

From Code to Compliance: Essential Steps to Adapt to Colorado’s New AI Law

On May 17, 2024, Colorado’s Governor Jared Polis signed into law The Colorado AI Act (SB205).  SB205 will take effect on February 1, 2026, and regulates the use of certain high-risk artificial intelligence (AI) systems. While the 2026 effective date could lull companies into thinking that preparing for the law can wait, its complex requirements will demand timing and planning to address. Additionally, Colorado is not the only US state to step into the ring of AI regulation and enforcement, and many of the steps needed to prepare for the SB205 will help build a compliance foundation for meeting other emerging laws. To help companies begin this process, we have prepared an overview of the law and identified essential compliance steps businesses should take now.
Insights
Aug 13, 2024

Arizona Spy Pixel Class Action Litigation Update

Recently filed class action complaints allege that companies that utilize embedded trackers within emails, or “spy pixels” as the plaintiffs are calling them, violate Arizona law because they collect a “communication service record” without first obtaining the consumer’s consent.
Insights
May 30, 2024

New HHS Guidance on Cookies

Related Insights

Insights
Dec 02, 2024
Navigating Consumer Opt-Outs in Corporate Transactions: Insights on California’s AB 1824
Blog Post
Nov 06, 2024
The SEC is watching: four companies charged for misleading cyber disclosures
Insights
Oct 28, 2024
Key Concepts In Privacy Law for Insurance Companies: Part 1 – GLBA
Insights
Oct 01, 2024
From Code to Compliance: Essential Steps to Adapt to Colorado’s New AI Law
On May 17, 2024, Colorado’s Governor Jared Polis signed into law The Colorado AI Act (SB205).  SB205 will take effect on February 1, 2026, and regulates the use of certain high-risk artificial intelligence (AI) systems. While the 2026 effective date could lull companies into thinking that preparing for the law can wait, its complex requirements will demand timing and planning to address. Additionally, Colorado is not the only US state to step into the ring of AI regulation and enforcement, and many of the steps needed to prepare for the SB205 will help build a compliance foundation for meeting other emerging laws. To help companies begin this process, we have prepared an overview of the law and identified essential compliance steps businesses should take now.
Insights
Sep 12, 2024
Navigating a Security Incident - Communication “Dos” and “Don’ts”
Insights
Sep 10, 2024
Navigating a Security Incident - Best Practices for Engaging Service Providers
Insights
Aug 13, 2024
Arizona Spy Pixel Class Action Litigation Update
Recently filed class action complaints allege that companies that utilize embedded trackers within emails, or “spy pixels” as the plaintiffs are calling them, violate Arizona law because they collect a “communication service record” without first obtaining the consumer’s consent.
Insights
Jul 01, 2024
Is Your Company Vulnerable to a Mass Arbitration Attack?
Insights
May 30, 2024
New HHS Guidance on Cookies