Email Amita | 602-381-5471
Amita Sanghvi advises clients on complex matters involving health care privacy, cybersecurity, and data-sharing strategy. With extensive experience spanning federal government service and private practice, she brings comprehensive and practical insight into the evolving laws shaping healthcare technology and data use.
Before joining the firm, Amita served as senior Privacy and Cybersecurity attorney with the U.S. Department of Health and Human Services (HHS) Office of General Counsel. Amita worked on complex and high-profile healthcare privacy and cybersecurity policy development, enforcement, and litigation initiatives. While at HHS, Amita provided strategic legal counsel on HIPAA Privacy, Security, and Breach Notification Rules, guiding federal investigations into data breaches and unauthorized disclosure of health information. Additionally, she played a pivotal role in the development of health information privacy and health information technology regulations, including proposed and finalized updates to the HIPAA Privacy and Security Rules and the Assistant Secretary for Technology Policy/Office of the National Coordinator (ASTP/ONC) for Health Information Technology information blocking requirements. Amita’s work spanned interagency collaboration on cybersecurity and emerging digital health issues involving artificial intelligence, telehealth, and health information exchange.
In private practice, Amita has advised hospital systems, post-acute providers, public health agencies, and health IT companies on HIPAA compliance programs, data use governance, and data sharing agreements. She also has experience in transactional matters, including joint ventures and health system restructuring.
Representative Matters
- Served as lead HHS Counsel on Texas v. HHS; Purl v. HHS; Tennessee et al. v. HHS; and Missouri v. HHS, challenging the validity of the 2024 HIPAA Privacy Rule amendments under the Administrative Procedures Act
- Served a detail to the HHS Office for Civil Rights (OCR) to shape and draft the HIPAA Privacy Rule to Support Reproductive Health Care Privacy
- Advised OCR on the enforcement of several HIPAA settlement agreements and served as counsel to OCR in administrative law hearings regarding enforcement cases
- Advised on issuance of HIPAA-related notices of enforcement discretion during the COVID-19 public health emergency and negotiated memorandum of understanding and data use agreements with FEMA, Department of Energy, Department of Homeland Security, and private partners
- Supported HHS and OCR on developing the proposed modifications to the HIPAA Privacy Rule related to care coordination and the proposed HIPAA Security Rule to strengthen cybersecurity of electronic protected health information
- Counseled ASTP/ONC on the development of the information blocking regulations promulgated under the 21st Century Cures Act and collaborated with both ASTP/ONC and OCR on the harmonization of the information blocking exceptions and enforcement with the HIPAA regulatory scheme.
- Collaborated in developing and coordinating an institution-wide strategy for HIPAA compliance for the restructured operations of a statewide public hospital system into a public-private hospital model
- Advised clients on preparation for OCR HIPAA desk audits of covered entities
- Served as outside privacy counsel to a variety of health care and technology companies, including: a leading provider of senior living services, hospital systems, clinical data registries, and prescription drug plans
- Negotiated multiple business associate agreements, data sharing agreements, data use agreements, and purchase agreements
- Advised venture capital groups, private equity funds, and other financial groups on data sharing regulatory issues in connection with the financing of health care mergers and acquisitions
Awards & Recognitions
- HHS Office for Civil Rights Director’s Award (2024)
- HHS Cybersecurity Awards Program for Excellence (CAPE) Team Award (2024)
- HHS Office of the General Counsel Service Award (2023)
- HHS Office of the General Counsel COVID-19 Response Honor Award (2023)
Publications & Presentations
- Panelist, “Data Privacy in Senior Living Environments: How to Operationalize an Effective Compliance Program,” AHLA Long Term Care and the Law (2021)
- Frequent Author, “American Health Lawyers Association Health Information Technology Practice Group Alerts” (2015)
- Guest Lecturer, “Health Privacy and Security,” Georgetown University Law Center (2014, 2015)
- Co-Author, “HIPAA/HITECH Resource Guide,” American Health Law Association (2014)
Activities & Memberships
- Member, Interagency CISA, HHS and Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (2019-2025)
- Member, HHS Artificial Intelligence Cybersecurity Work Group (2022-2025)
- AmeriCorps HealthCorps Member 2002-2003
Education & Admissions
- J.D., University of North Carolina at Chapel Hill School of Law, 2008; Editor, North Carolina Journal of Law and Technology
- Master of Healthcare Administration, Focus in Finance & Information Technology, University of North Carolina Gillings School of Global Public Health, 2005
- B.A., University of Rochester, 2002; Rush Rhees Merit Scholar Award for Overall Excellence
- Admitted in Washington D.C., 2013 and Georgia, 2008