Amy C. Pimentel advises clients on U.S. and international data protection, privacy and cybersecurity. Her clients are diverse – from multinational Fortune 500 companies to start-ups – and operate in a variety of industries, including health care, technology, consumer products, retail, media, and financial services.
Amy is skilled at harmonizing requirements across industries and jurisdictions to build practical, risk-based and business-focused global privacy and cybersecurity programs. In the U.S., this includes advising on federal and state laws such as HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, CCPA, state breach notification laws, and state data security laws, as well as existing self-regulatory frameworks, including those covering online advertising and payment card processing. She works with clients to understand their obligations under international laws such as PIPEDA, the GDPR and ePrivacy, and China’s cybersecurity and privacy laws, and helps clients implement cross-border transfer mechanisms, such as Privacy Shield and EU Model Clauses, to enable the flow of data between company entities and third parties.
Amy also manages large and complex cyber incidents by guiding clients through the phases of breach response and post-incident remediation. She has teamed with forensic vendors and other consultants to help clients investigate, remediate, mitigate and notify required parties. She has also teamed with her white collar and litigation colleagues to manage and respond to ensuing government investigations.
In addition, Amy helps clients, implement pragmatic and approaches to managing and leveraging big data, advises clients through comprehensive privacy and cybersecurity assessments, vets privacy and security risks in corporate transactions, and she drafts and negotiates contracts concerning data-related partners and vendors.
Education
Northeastern University School of Law, JD, 2014
Duke University, BA, 2007
Admissions
Massachusetts
Languages
English
Spanish
Associate | Boston
Boston: +1 617 535 3948
Boston: +1 617 535 3800
United States / McDermott Event / February 2020
On the Subject / January 8, 2020
On the Subject / January 8, 2020
United States / McDermott Event / January 2020
United States / McDermott Event / December 2019
United States / McDermott Event / November 2019
United States / McDermott Event / October 2019
On the Subject / September 20, 2019
San Francisco, CA / McDermott Event / September 10, 2019
Wolters Kluwer / August 2019
New York, NY / McDermott Event / June 18, 2019
On the Subject / May 9, 2019
Washington, DC / Speaking Engagements / April 5, 2019
Boston, Massachusetts / Speaking Engagements / March 19, 2019
Boston, Massachusetts / Speaking Engagements / February 19, 2019
Webcast / McDermott Event / December 5, 2018
Massachusetts Lawyers Weekly / October 26, 2018
On the Subject / June 29, 2018
Boston, Massachusetts / Speaking Engagements / June 20, 2018
On the Subject / May 2, 2018
International News / April 2018
AHLA (American Health Lawyers Association) / March 2018
Washington, District of Columbia / Speaking Engagements / February 6, 2018
On the Subject / February 5, 2018
Boston, Massachusetts / Speaking Engagements / January 29, 2018
Special Report / January 22, 2018
Ontario, Canada / Speaking Engagements / October 11, 2017
On the Subject / October 10, 2017
Chicago, Illinois / Speaking Engagements / September 27, 2017
On the Subject / September 25, 2017
Publications / August 2017
Webcast / McDermott Event / May 24, 2017
On the Subject / May 15, 2017
Boston, Massachusetts / Speaking Engagements / March 23, 2017
Bloomberg BNA Health IT Law and Industry Report / January 2, 2017
On the Subject / November 11, 2015
On the Subject / May 4, 2015
On the Subject / February 20, 2015
Special Report / February 12, 2015
Law360 / December 19, 2014
Special Report / December 10, 2014
Buffalo Law Review, Vol. 62, 933 / August 2014
1
2
3
4
5
6
7
... 7
Chiropractic Economics / May 21, 2018
HIPAA Consulting Vendors Often Misinterpret a Key Compliance Requirement
Security Week / September 6, 2016
1
Do not send any information or documents that you want to have treated as secret or confidential. Providing information to McDermott via email links on this website or other introductory email communications will not create an attorney-client relationship; will not preclude McDermott from representing any other person or firm in any matter; and will not obligate McDermott to keep confidential the information you provide. McDermott cannot enter into an attorney-client relationship with you until McDermott has determined that doing so will not create a conflict of interest and until you and McDermott have entered into a written agreement or engagement letter that sets forth the terms of our relationship.
We use cookies to improve the functionality and performance of this site. By continuing to use this site, you are providing us with your consent to our use of cookies. Please see our Privacy Policy for details.
