Melissa Crespo

Melissa Crespo helps clients navigate a wide range of challenging privacy compliance and data security matters with a focus on the health information and the health care sector. She regularly helps clients develop and implement privacy compliance programs and advises companies on managing risk in connection with cutting-edge technologies and data initiatives.

Melissa has particular experience in advising clients on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other laws governing the collection and use of medical and health information.

Melissa regularly counsels clients responding to data breaches and security incidents. She has successfully defended clients in numerous regulatory inquiries regarding data security practices, including investigations by the Federal Trade Commission, the U.S. Department of Health and Human Services, state attorneys general, and foreign regulators following data security incidents.

Melissa also advises multinational companies on the privacy and data security aspects of their M&A transactions and has experience drafting and negotiating tailored privacy and data security contract provisions.