Alexandra Moylan advises health systems, academic medical centers, and life sciences organizations on privacy compliance, AI governance, clinical research regulation, and enterprise data operations. As both a Certified Information Privacy Professional (CIPP/US) and Certified AI Governance Professional (AIGP), Alex helps clients design and implement legally compliant data governance frameworks that align with HIPAA, FDA requirements, and global privacy standards, enabling the responsible use of health data and artificial intelligence in research and clinical care.
Alex works extensively with health systems and academic research institutions to ensure compliance across Institutional Review Board (IRB) operations, data use and sharing, and human subjects research oversight. She assists with the development and review of IRB policies, data sharing agreements, informed consent templates, and data access workflows that support compliant secondary research, multisite studies, and enterprise data warehouse initiatives. Her counsel integrates HIPAA Privacy and Security Rule requirements with emerging AI and predictive analytics applications, helping organizations leverage data while maintaining regulatory fidelity.
In the AI and data governance space, Alex advises on the ethical and regulatory dimensions of algorithmic development, validation, and deployment in health care environments. She counsels clients on compliance with state, federal, and international privacy laws, including HIPAA, the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR), and the EU Artificial Intelligence Act. She has led the design of AI governance frameworks addressing transparency, bias mitigation, and model accountability within enterprise health systems.
Her practice also encompasses complex data transactions, including drafting and negotiating data use, licensing, and de-identification agreements for hospitals, research consortia, and technology vendors. She routinely collaborates with general counsel, chief privacy officers, research compliance teams, and IT and information security leadership to operationalize data governance policies and privacy compliance strategies.
Clients value Alex's ability to bridge clinical, technical, and legal considerations when advising on digital transformation, data warehousing, and AI implementation. Her counsel provides practical strategies that advance innovation while satisfying regulatory, ethical, and institutional review expectations.
A frequent writer and speaker, Alex contributes thought leadership on health care AI regulation, HIPAA modernization, and research privacy to publications including Bloomberg Law and Corporate Compliance Insights. She serves on the Maryland State Bar