Amy de La Lama

  1. People /

Amy de La Lama

Amy de La Lama

Partner

  1. People /

Amy de La Lama

Amy de La Lama

Partner

Amy de La Lama

Partner

Boulder

Partner; Chair – Global Data Privacy and Security Practice; and Global Practice Group Leader – Technology, Commercial and Government Affairs

T: +1 303 417 8535

VcardVcard
Download PDFDownload PDF
Print
Share

Biography

Amy is the Global Practice Group Leader for Technology, Commercial & Government Affairs and also the Chair of the Firm’s Global Data Privacy and Security Practice. She has nearly two decades of experience in global privacy, data security and cyber security with a specific focus on health care privacy and security issues. She provides advice to a wide range of multi-national pharmaceutical, life sciences and medical device companies, as well as retail companies, online businesses, B2B companies, and other types of organizations regarding these issues. Amy has deep experience guiding health care clients through the development and implementation of broad-based privacy compliance programs as well as advising on GDPR and similar global privacy laws in addition to CCPA, HIPAA and other US privacy law issues. She assists regularly with transactions involving complex health privacy issues and also advises organizations on emerging health tech issues, including those related to the collection of health and medical data in the context of digital advertising and the use of this and other sensitive data for AI/machine learning purposes.  Amy regularly assists organizations navigate the full life cycle of security incidents and data breaches as well as with breach preparedness and remediation. 

Civic Involvement & Honors

  • The Best Lawyers in America, Privacy and Data Security Law (2023)
  • Chambers USA- Nationwide, Privacy & Data Security, "Up and Coming" (2023)
  • Legal 500 US, Next Generation Lawyer in Cyber Law (including Data Privacy and Data Protection), 2019 - 2020

Professional Affiliations

  • Certified Information Privacy Practitioner
  • Illinois State Bar Association - Member
  • Colorado Bar Association – Member

AI Legislation Snapshot

To help companies achieve their business goals while minimizing regulatory risk, our team actively tracks proposed and enacted AI regulatory bills from across the Unites States to enable our clients to stay informed in this rapidly-changing regulatory landscape.

AI Legislation Snapshot

To help companies achieve their business goals while minimizing regulatory risk, our team actively tracks proposed and enacted AI regulatory bills from across the Unites States to enable our clients to stay informed in this rapidly-changing regulatory landscape.

Admissions

  • Illinois, 2004
  • Colorado, 2001

Education

  • University of Colorado, J.D., Order of the Coif, 2001
  • University of Virginia, B.A., high honors, 1996
  • University of Virginia, B.A., summa cum laude, 1996

Related Practice Areas

  • Intellectual Property and Technology

  • Litigation & Dispute Resolution

  • Data Privacy & Security

  • Healthcare & Life Sciences

  • Corporate

  • Investigations

  • Regulation, Compliance & Advisory

Resources

Publications

Speaking Engagements

Related Insights

Insights
May 30, 2024

New HHS Guidance on Cookies

Insights
May 14, 2024

FTC Cybersecurity and Data Privacy Roundup

Last year was a pivotal one for data privacy, as privacy received substantial attention from many regulators, including the Federal Trade Commission (“FTC”). Looking back at the FTC’s 2023 enforcement actions, statements and policies provides attorneys and clients with a helpful compliance roadmap of what is to come.
News
Feb 20, 2024

Chambers Global 2024

Insights
Feb 14, 2024

Washington My Health My Data Act FAQS: data subject rights

On April 27, 2023, the Washington State governor signed into law the My Health My Data Act or the MHMDA. In spite of the onerous and at times confusing requirements of the MHMDA, the Washington Attorney General (AG) has only published a short set of Frequently Asked Questions to help address some of this uncertainty.  Nevertheless, most of the law’s provisions take effect on March 31, 2024, meaning that, at this point, companies have a very short runway to meet their obligations and brace for the private right of action allowed for under the act.  Like so many other features of the MHMDA, data subject rights are deceptively complicated and have the potential to create significant administrative hurdles to getting it right.  As promised in our recent summary of the MHMDA (MHMDA: Time to Comply), we are examining in more detail these tricky issues in our MHMDA FAQs and have done a deep dive into data subject rights in this FAQ. 

Related Insights

Insights
May 30, 2024
New HHS Guidance on Cookies
News
May 30, 2024
Partner Amy de Lama and Associate Andrea Rastelli share insights on Washington My Health My Data Act FAQs: Data Subject Rights
Insights
May 14, 2024
FTC Cybersecurity and Data Privacy Roundup
Last year was a pivotal one for data privacy, as privacy received substantial attention from many regulators, including the Federal Trade Commission (“FTC”). Looking back at the FTC’s 2023 enforcement actions, statements and policies provides attorneys and clients with a helpful compliance roadmap of what is to come.
Insights
Apr 08, 2024
New York May Lead the Pack Through Imposition of Data Excise Taxes
Insights
Mar 05, 2024
Washington My Health Data Act FAQ's: processing biometric data
News
Feb 20, 2024
Chambers Global 2024
Insights
Feb 14, 2024
Washington My Health My Data Act FAQS: data subject rights
On April 27, 2023, the Washington State governor signed into law the My Health My Data Act or the MHMDA. In spite of the onerous and at times confusing requirements of the MHMDA, the Washington Attorney General (AG) has only published a short set of Frequently Asked Questions to help address some of this uncertainty.  Nevertheless, most of the law’s provisions take effect on March 31, 2024, meaning that, at this point, companies have a very short runway to meet their obligations and brace for the private right of action allowed for under the act.  Like so many other features of the MHMDA, data subject rights are deceptively complicated and have the potential to create significant administrative hurdles to getting it right.  As promised in our recent summary of the MHMDA (MHMDA: Time to Comply), we are examining in more detail these tricky issues in our MHMDA FAQs and have done a deep dive into data subject rights in this FAQ. 
Insights
Feb 12, 2024
Colorado adopts universal opt-out requirements
Webinars
Feb 08, 2024
Public Company Update, Cybersecurity Issues and Other Trending Topics