Overview

Tech-savvy and solutions-oriented, attorney Alaap Shah deftly guides clients through complex and ever-evolving privacy, cybersecurity, medical device, artificial intelligence (AI), interoperability, digital health, telehealth, and other laws and regulations.

As a co-leader of the AI Cross-Practice Working Group at affiliate Epstein Becker Green, Alaap helps clients compliantly develop and deploy these cutting-edge technologies.

He enables clients to build trust among stakeholders so that clients can robustly collect, share, analyze, and protect data and information technology assets. Alaap can also translate “IT speak” for legal, compliance, and business people.

Alaap holds several globally recognized technology and information assurance credentials, including AIGP, CIPP/US, CPHIMS, and HITRUST CCSFP. Clients appreciate his strategic and pragmatic approach to risk management that bridges the gap among legal, compliance, IT, and business teams so that they can succeed in developing and marketing innovative and cutting-edge solutions. In the area of data and interoperability, Alaap seeks ways to maximize data value. In the area of AI, Alaap navigates issues at the intersection of law, technology, and data in the health care and life sciences space.

Alaap’s clients include all types of health care, life sciences, data analytics, and technology companies at various stages of development. He also represents startup companies in the United States and abroad that are developing digital health applications, medical devices, telehealth solutions, AI, and data analytics platforms. In addition, he works with mid-size to large companies seeking to expand and mature legal, compliance, and risk management functions to support expansion and growth.

He has also served as Senior Counsel and Chief Privacy and Security Officer at an oncology membership society, where he strengthened enterprise-wide privacy and security, helped launch a Big Data company focused on improving quality of care by harnessing real world cancer patient medical information, and built data sharing trust networks among the oncology community.

Focus Areas

Recognition

  • OneTrust DataGuidance, “DataGuidance Expert” for Washington, DC

Third-Party Certifications

  • Health Information Trust Alliance (HITRUST), Certified Common Security Framework Practitioner (CCSFP)
  • Healthcare Information and Management Systems Society, Certified Professional in Healthcare Information and Management Systems (CPHIMS)
  • International Association of Privacy Professionals (IAPP), Artificial Intelligence Governance Professional (AIGP)
  • IAPP, Certified Information Privacy Professional in the United States (CIPP/US)

Credentials

Education

  • University of Maryland School of Law (J.D., cum laude)
    • Notes & Comments Editor, Journal of Health Care Law & Policy
  • Columbia University (M.P.H.)
    • Health Policy & Management
  • Union College (B.S.)
    • Biochemistry
Jump to Page

Privacy Preference Center

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.