Kristen Rosati

Practice Areas

• Healthcare

• Data Privacy & Security

Career

Kristen is considered one of the nation’s leading “Big Data” and HIPAA compliance attorneys, with deep experience in data governance and strategy, data sharing for research and innovation, data breaches, state consumer data privacy, biobanking and genomic privacy, and clinical research compliance. Kristen is a sought-after national speaker on these issues and has been active in national healthcare policy.

She is a past President (2013 – 2014) and a Fellow of the American Health Law Association, the nation’s largest health care legal organization, and received AHLA’s 2025 David J. Greenberg Founder’s Award in 2026, the most prestigious honor awarded by AHLA. Kristen has been recognized by Chambers Global for Privacy & Data Security: Healthcare (2026), Chambers USA for Privacy & Data Security: Healthcare (2020 – 2026), and Chambers USA for Healthcare in Arizona (2015 – 2026). She has been recognized in The Best Lawyers in America© for Health Care Law (2007 – present) and Administrative/Regulatory Law (2020 – present), and received Best Lawyers© “Lawyer of the Year” in Phoenix for Health Care Law (2014, 2017, 2021, 2025) and Administrative/Regulatory Law (2026). Kristen has been recognized by Southwest Super Lawyers for Healthcare (2015 – present) and received its Top 50 Arizona Super Lawyers (2024) and Top 25 Women Arizona Super Lawyers (2024). She has received multiple recognitions from AzBusiness Magazine, including Who’s Who in Healthcare, Leaders in Health Care Law, the Arizona Health Care Leadership Award for Legal Advocate of the Year, Arizona’s Top 100 Lawyers, and one of the 50 Most Influential Women in Arizona Business.

Professional Memberships

• American Health Law Association (AHLA) President (2013 – 2014); Fellow (2021 – present); Board of Directors (2006 – 2015)

• Founding Member, Arizona Leadership Council, Take the Lead Women (2015 – 2026)

• Member, Planning Committee, "Optimizing Public-Private Partnerships for Clinical Cancer Research-a Workshop," National Academies of Sciences, Engineering, and Medicine (October 2023)

• Member, Planning Committee, “Changing the Culture of Data Management and Sharing – a Workshop,” National Academies of Sciences, Engineering, and Medicine Virtual Workshop (April 2021)

• Member, Program Planning Committee for AHLA Artificial Intelligence Convener Session (2020)

• Member, Planning Committee, National Academies of Sciences, Engineering, and Medicine Workshop on Neuroscience Data in the Cloud (September 2019)

• Member, Arizona State University Health Futures Council (2018 – 2021)

• Member, Program Planning Committee, AHLA Academic Medical Centers and Teaching Hospitals Institute (2015 – 2019)

• Member, Program Planning Committee, AHLA Precision Medicine Institute (2016 – 2017)

• Member, Healthcare Leadership Council for the Greater Phoenix Economic Council (2013 – 2015)

• Member, Planning Committee, Annual Meeting of the International Society of Biomedical and Environmental Biorepositories (2014)

• Member, eHealth Initiative National Council on Data and Analytics (2011 – 2012)

• Member, Brookings Active Surveillance Implementation Council at the Brookings Institution (2010 – 2011)

• Founding Member, Executive Committee and Advisory Board of the Arizona State University Center for Health Care Innovation and Clinical Trials (2008 – 2009)

• Legal Chair, Adoption of Standard Policies Collaborative, Health Information Security and Privacy Collaborative, funded by the Office of the National Coordinator for Health Information Technology (2008 – 2009)

• Member, National Governor's Association State Alliance for e-Health, Health Information Protection Task Force (2007 – 2008)

• Member, Advisory Board of the Arizona State University Biomedical Informatics Department (2006 – 2007)

Publications

• Co-author, “Optimizing Public-Private Partnerships to Support Clinical Cancer Research,” Journal of the National Cancer Institute (Dec. 12, 2024)

• Author, “Legal Compliance and Good Data Stewardship in Data Sharing Plans,” Harvard Data Science Review (July 28, 2022)

• Co-author, “Designing a Trusted Framework for the Application of AI in Health Care,” AHLA White Paper (Sept. 3, 2021)

• Author, “Coping with Evolving Standards of Data De-identification,” 2021 Health Law Handbook, Thomson Reuters Health Law Series (Aug. 2021)

• Co-author, “Data Sharing for Clinical Integration and other ‘Big Data’ Initiatives,” AHLA Fundamentals of Health Law (2018)

• Co-author, “Legal Compliance in Using Biospecimens for Research,” Chapter 4, Health Law and Compliance Update, Wolters Kluwer (2018)

• Co-author, “Privacy Compliance in Clinical Research,” Bloomberg Law (Oct. 2017)

• Author, “Patient Privacy and Clinical Laboratory Data,” Journal of Clinical Chemistry 63:8 (2017)

• Co-author, “Health Care Data Breaches: Practical Advice for Trying Times,” AHLA Journal of Health Law and Life Sciences (Feb. 2017)

• Co-author, “2015 Health Law and Compliance Update,” Wolters Kluwer (2015)

• Co-author, “Anatomy of a Health Care Data Breach,” Aspen Publishers' Health Law and Compliance Update (2014)

• Author, “Protecting Your Clients' Information: HIPAA and Other Cybersecurity Imperatives,” Arizona Attorney (Nov. 2013)

• Author, “HIPAA: Once Again a Major Compliance Concern,” Health Care Program Compliance Guide, Bloomberg BNA (April 2012 and June 2013)

• Co-author, “A Policy Framework for Public Health Uses of Electronic Health Data,” Pharmacoepidemiology & Drug Safety, Vol. 21 (2012)

• Author, “Using Electronic Health Information for Pharmacovigilance: The Promise and the Pitfalls,” Journal of Health & Life Sciences Law, Vol. 2, No. 4 (July 2009)

• Co-author and co-editor, “HIT in a HITECH World,” AHLA (2009)

• Co-author, “Developments in Electronic Health Records, Chapter 7,” 2007 Health Law & Compliance Update (2007)

• Author, “Electronic Health Records: Controlling the Risks,” Revenue Cycle Strategist (March 2006)

• Author, “HIPAA’s Impact on Lawyers and Litigation, Chapter 6,” Health Law Handbook (2005)

• Author, “Human Genetic Sampling and the HIPAA Privacy Standards,” Jurimetrics: The Journal of Law, Science, and Technology (2005)

• Co-author & co-editor, “The Quest for Interoperable Electronic Health Records: A Guide to Legal Issues in Establishing Health Information Networks,” AHLA (2005)

• Co-author, “Practice Resource: Sample Lawyer Engagement-Letter Language with Covered Entity under HIPAA Provisions,” Journal of Health Law (Fall 2003)

• Co-author, “Lawyers as HIPAA Business Associates,” American Health Lawyers Association Expert Monograph Series (Nov. 2003)

• Co-author, “Disclosure of Protected Health Information to Law Enforcement under the HIPAA Privacy Standards,” AHLA Topical Insight Series (July 2003)

• Co-author, “Your law firm signed that HIPAA business associate agreement. But is the firm complying with it?,” Health Lawyers News (AHLA, June 2003)

• Co-author, “Standards for Privacy of Individually Identifiable Health Information,” AHLA Special Member HIPAA Briefing Collection (2d ed.) (AHLA, Jan. 2003)

• Author, “DHHS Wisely Proposed to Remove the ‘Consent’ Requirement from the HIPAA Privacy Standards,” Journal of Health Law (Spring 2002)

• Author, “HIPAA Privacy: The Compliance Challenges Ahead,” Journal of Health Law (Winter 2002)

• Author, “The HIPAA Privacy Standards Proposed Modifications: A Step in the Right Direction,” AHLA Digest Analysis (June 2002)

• Author, “The HIPAA Privacy Guidance: Preview of a ‘Reasonable’ Enforcement Posture,” AHLA Digest Analysis (AHLA, October 2001)

• Co-author, “Standards for Privacy of Individually Identifiable Health Information,” AHLA Special Member HIPAA Briefing Collection (1st ed.) (AHLA, April 2001)

Personal

Kristen started her educational journey at the University of Michigan Medical School but decided to go to law school instead to pursue health policy. Kristen is still deeply interested in science and the practice of medicine, which she brings to her legal practice.

Awards