Alexandra (Alex) Moylan advises health systems, academic medical centers, and life sciences organizations on privacy compliance, AI governance, clinical research regulation, and enterprise data operations. As both a Certified Information Privacy Professional (CIPP/US) and Certified AI Governance Professional (AIGP), Alex helps clients design and implement legally compliant data governance frameworks that align with HIPAA, FDA, and global privacy standards, enabling the responsible use of health data and artificial intelligence in research and clinical care.
Alex works extensively with health systems and academic research institutions to ensure compliance across Institutional Review Board (IRB) operations, data use and sharing, and human subjects research oversight. She assists with the development and review of IRB policies, data sharing agreements, informed consent templates, and data access workflows that support compliant secondary research, multisite studies, and enterprise data warehouse initiatives. Her counsel integrates HIPAA Privacy and Security Rule requirements with emerging AI and predictive analytics applications, helping organizations leverage data while maintaining regulatory fidelity. She also advises on sponsored research agreements, material transfer agreements (MTAs), and data access frameworks for university-industry collaborations and multiinstitutional research consortia.
In the AI and data governance space, Alex advises on the ethical and regulatory dimensions of algorithmic development, validation, and deployment in health care environments. She counsels clients on compliance with state, federal, and international privacy laws, including HIPAA, the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR), and the EU Artificial Intelligence Act. She has led the design of AI governance frameworks addressing transparency, bias mitigation, and model accountability within enterprise health systems, drawing on standards including the NIST AI Risk Management Framework (AI RMF) and sector-specific FDA guidance on AI/ML-based Software as a Medical Device (SaMD).
Her practice also encompasses complex technology and data transactions, including drafting and negotiating master service agreements, software as a service (SaaS) and software licensing agreements, AI procurement contracts, data use agreements, data licensing agreements, data processing agreements (DPAs), business associate agreements (BAAs), and de-identification agreements for hospitals, research consortia, and technology vendors. She advises clients on vendor due diligence and risk assessment for AI tools and data platforms, helping organizations structure contracts that address intellectual property, data rights, liability, and regulatory compliance.
Clients value Alex's ability to bridge clinical, technical, and legal considerations when advising on digital transformation, data warehousing, and AI implementation. Her counsel provides practical strategies that advance innovation while satisfying regulatory, ethical, and institutional review expectations.
A frequent writer and speaker, Alex contributes thought leadership on health care AI regulation, HIPAA modernization, and research privacy to publications including Bloomberg Law and Corporate Compliance Insights. She serves on the Maryland State Bar Association's AI Task Force and regularly trains clients on privacy, AI, and research compliance programs.