Deepali Doddi

Deepali Doddi concentrates her practice on data privacy and cybersecurity matters, with a focus on health information privacy and security. Leveraging her experience as a former regulator with the US Department of Health and Human Services, Office for Civil Rights (OCR), Deepali counsels clients on all facets of Health Insurance Portability and Accountability Act (HIPAA) compliance, including data-sharing strategies, policies and procedures, business associate agreements, risk analysis and management, and breach response.

Deepali also advises clients on issues arising under various other privacy regimes, such as state health information privacy laws, 42 C.F.R. Part 2, the CCPA and other state consumer privacy laws, CAN-SPAM, TCPA, the FTC Act, and the GDPR. In addition, she regularly defends clients facing HIPAA compliance investigations by OCR and state attorneys general. Deepali assists a broad range of health industry clients, including digital health companies, physician practices, health systems, academic medical centers, health technology companies, research organizations, and private equity firms and portfolio companies.

Deepali is both a Certified Information Privacy Professional/United States (CIPP/US) and a Certified Information Privacy Professional/Europe (CIPP/E) through the International Association of Privacy Professionals (IAPP).

Read full biography: https://www.mwe.com/people/doddi-deepali/