This site is part of the Informa Connect Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 3099067.


Alaap B. Shah
Member of the Firm at Epstein Becker Green, USA


ALAAP B. SHAH is a Member of the Firm in the Health Care and Life Sciences practice, in the firm's Washington,
DC, office.

Mr. Shah:

 Advises clients on privacy, cybersecurity, and data protection laws and regulations
 Advises on cybersecurity and data breach matters
 Advises clients on health care fraud and abuse matters and government investigations relating to health
information technology
 Counsels clients on digital health and data asset management strategies and related compliance issues

His work focuses on defense and counseling of health care entities on legal and regulatory compliance issues around
privacy, cybersecurity, and data asset management. He has extensive experience with legal issues related to health
information technology, big data analytics, and digital health strategies. He provides compliance counseling,
establishes and evaluates compliance programs, conducts privacy and security risk assessments, establishes
compliant contracting strategies to build trust networks, and responds to data breaches.

Mr. Shah is a Certified CSF Practitioner, a designation given by the Health Information Trust Alliance (HITRUST), an
organization that provides training to develop and maintain effective security programs for health care and life
sciences companies that comply with security laws, regulations, and standards, including HITECH, HIPAA, PCI,
JCAHO, CMS, ISO, NIST, and various other federal, state, and business requirements. He is also recognized by the
Healthcare Information and Management Systems Society (HIMSS) as a Certified Professional in Healthcare
Information and Management Systems (CPHIMS). Mr. Shah is also recognized by the International Association of
Privacy Professionals (IAPP) as a Certified Information Privacy Professional in the United States.

Mr. Shah began his legal career at Epstein Becker Green. Before rejoining the firm in October 2017, he served as
Senior Counsel and Chief Privacy and Security Officer at an oncology membership society where he strengthened
enterprise-wide privacy and security, helped establish a big data initiative focused on improving quality of care by
harnessing cancer patient medical information, and built data sharing trust networks among the oncology community.
During law school, Mr. Shah worked with the U.S. Department of Health and Human Services (DHHS), Office of
General Counsel, where he provided legal counsel and support to all agencies and programs under the Public Health
Division of DHHS.