Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Ronald Baumgarten Expects Upcoming Trade Policies to be Similar to Last Republican Administration

Patrick Campbell, Jonathan New Author Law360 Article on Whistleblower Programs

DOJ Antitrust Division Adds to Guidance on the Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations

BakerHostetler Alumni Newsletter – Fall 2024

Aleksandra's practice is devoted to healthcare, and she has assisted hundreds of healthcare organizations and business associates through privacy and data security incidents, regulatory inquiries and complex Health Insurance Portability and Accountability Act (HIPAA) compliance issues.

Incident Response

When a privacy and/or security incident occurs, Aleksandra takes an arms-linked approach with clients, coordinating a skilled team - including forensic, public relations and negotiations professionals - to quickly help contain the incident, reduce public and regulatory scrutiny, guide investigations and protect the clients’ reputations.

Regulatory Investigations

Whether received in the aftermath of significant incidents or as a result of a complaint, regulatory investigations of healthcare entities and business associates carry significant risk. Clients have entrusted Aleksandra with coordinating the internal investigation for and responding to hundreds of regulatory inquiries conducted by federal and state regulators. Aleksandra’s early-career litigation experience has made her an incredibly effective oral advocate when presenting to regulators, and honed her ability to gracefully work with regulators on difficult points of contention.

Proactive HIPAA Compliance

Aleksandra is a sought-after business partner for privacy and compliance issues. Clients appreciate her ability to leverage her wealth of regulatory and client experiences to help the client find solutions that are bespoke to their organization and particular challenge.

Aleksandra is the firm’s Chicago Digital Assets and Data Management Leader.

Aleksandra brings a strategic advantage to the defense of class action litigation, having started her legal career as a plaintiffs’ attorney focusing on consumer data privacy class actions. Her strengths in cybersecurity are bolstered by her representation of startups and closely held technology companies in a variety of commercial disputes.

core/freeform

J.D., John Marshall Law School, 2010, 

B.A., Columbia College, 2006, 

<ul>
<li>Cybersecurity Docket Incident Response 40 (2021 to 2022)</li>
<li>Cybersecurity Docket &#8220;Incident Response 50&#8221; (2023)</li>
<li>Illinois Super Lawyers &#8220;Rising Star&#8221; (2013 to 2024)</li>
</ul>

Chicago

Data Counsel

DSIR Deeper Dive: Tracking the Crackdown on Tracking/Pixel Technologies: Web Litigation and Regulatory Landscape – Part 2

DSIR Deeper Dive: Tracking the Crackdown on Tracking/Pixel Technologies: Web Litigation and Regulatory Landscape – Part 1

Aleksandra Vold Discusses HIPAA and AI Use in Healthcare Organizations in G2 Intelligence Report

It’s Spooky Season: HHS OCR Finalizes Two Investigations into Ransomware Incidents, Providing Nightmare Material for Acquiring Entities

Aleksandra Vold Shares Perspective on Regulatory Change in G2 Intelligence Article

Northern District of Texas Flashes the ‘Blue Lights’ on OCR’s Pixel Guidance

Diving Deeper into the Revised Health Breach Notification Rule

It’s Not Just About Dobbs: HHS Issues Final Rule on Reproductive Health

FTC Vastly Expands Reach of the Health Breach Notification Rule

Casie Collignon, Aleksandra Vold Moderate Panels at NetDiligence Cyber Risk Summit

Aleksandra Vold Comments on FTC’s Health Breach Notification Rule

Lipstick on a Pig: OCR’s Cosmetic Revisions to Guidance on Tracking Technology in Healthcare Fail to Address Fundamental Issues

HHS OCR Provides Annual Report to Congress Detailing 2022 Enforcement Activities

Aleksandra Vold Moderates Panel at HIMSS24 Provider Executive Summit

Webinar: The Privacy Strategist – Consumer Health Data

The Long-Awaited Part 2 Modifications Are Finalized with New Obligations for Part 2 Providers and Less Friction for Sharing Patient Information

HHS OCR Announces Largest Civil Monetary Penalty Imposed Since 2021 for Snooping Incident

With new advisory committee, FDA signals increased focus on digital health, Vold says

Health Law Update

FDA Forms Digital Health Advisory Committee to Navigate Emerging Technologies

Cybersecurity, Privacy and Data Protection (Ethics): Essentials for Lawyers

Aleksandra Vold Discusses Class Actions Involving Data Privacy Violation Claims

Ted Kobus, Lynn Sessions and Aleksandra Vold Again Named Top Cybersecurity Incident Responders

Aleksandra Vold Speaks About the Evolving Cybersecurity Insurance Landscape

With New Enforcement Action, FTC Warns Against Health Information Being Used for Advertising Purposes

HHS Announces New Divisions to Address Weighty Case Load

Latest FTC Health Privacy Case Sheds Light on Agency Health Privacy Approaches

OCR Guidance on Use of Tracking Technologies Warrants Review of Website Tech

HHS Proposes New Rule Aligning Part 2 Regulations with HIPAA

Aleksandra Vold and Stefanie Ferrari Address Ad Tech at Deja-Mooo

Aleksandra Vold, Nichole Sterling Address Incident Response at Georgetown Advanced eDiscovery Institute Pre-Conference Webinar Series

Employment Law Spotlight

For California Electronic and Computing Services Companies, New Processes Required Before Responding to Warrants, Subpoenas and Other Information Requests

Aleksandra Vold Speaks About Incidence Response Readiness in Healthcare

What’s Old Is New Again: OCR Announces $300,000 Settlement Related to Improper Disposal of Physical PHI

‘Unboxing’ the New NIST Guidance: NIST Publishes Significant Update to Healthcare Cybersecurity Guide

Dobbs on Demand

Dobbs on Demand: Healthcare Privacy on the Line in a New Legal Setting

Dobbs on Demand

HHS OCR Guidance to 60,000 Retail Pharmacies: Refusal to Fill Rx Based on Potential Pregnancy Termination Concerns Is a Civil Rights Violation, Will Be Investigated

Dobbs Triggers Significant Healthcare and Privacy Law Concerns and Confusion

Office for Civil Rights Provides Guidance: HIPAA Privacy Rule on Disclosures of Information Relating to Reproductive Healthcare

Aleksandra Vold on AHLA Podcast about Public Law 116-321

Ted Kobus, Lynn Sessions and Aleksandra Vold Named Top Cybersecurity Incident Response Lawyers

OCR Announces Four Enforcement Actions

Aleksandra Vold Speaks on Strategies to Halt Ransomware Attacks

Aleksandra Vold Speaks on Risks of Ransomware

Aleksandra Vold Joins Webinar to Discuss Cyber Insurance Code Breakers

Three BakerHostetler Attorneys Named to ‘Incident Response 40′ List of Top Breach Response Lawyers

Privacy-Forward California AG Xavier Becerra Confirmed as Next HHS Secretary

BakerHostetler Elevates 22 Attorneys to Firm Partnership

Digital Assets and Data Management

Healthcare Privacy and Compliance

Digital Risk Advisory and Cybersecurity

Russia-Ukraine War Resource Center

Employee Privacy

Post-Roe Resource Center

Artificial Intelligence (AI)

<ul>
<li>Handled data breaches ranging from a single record loss to 500 million records lost with multi-national notification requirements, and attacks ranging from drive-by ransomware injections to pervasive network compromises by international hacking groups, which led to personal and company extortion attempts.</li>
<li>Counsels some of the nation&#8217;s largest and most prestigious healthcare organizations on HIPAA Privacy Rule and Security Rule compliance.</li>
<li>Coordinates all aspects of data security incident response, from intake and vendor selection (forensics, PR and notification), to supervising and directing forensic investigations and designing public disclosure content and strategy.</li>
<li>Assisted federal law enforcement investigations for two separate hospitals that resulted in the conviction and imprisonment of internal bad actors.</li>
<li>Assists in management, investigation and response related to regulatory inquiries from state attorneys general, state regulators and HHS OCR. Coordinates and participates in clients’ internal investigations, document and policy reviews, and drafts formal responses to regulatory inquiries.</li>
<li>Works with clients to understand system posture and regulatory environment to counsel on best practices, regulatory requirements and industry standards. Drafts and revises policies and procedures related to privacy, Incident Response Plans, Information Governance policies and Data Mapping initiatives to mitigate cyber risks. Counsels companies in various industries on website best practices, as well as international and domestic requirements for terms of use, and privacy policies.</li>
<li>Counsels both acquiring/investing and target companies on the scope of due diligence requests and responses related to data privacy and data security reps and warranties.</li>
</ul>

Aleksandra Vold

Aleksandra Vold

Experience

Recognitions and Memberships

Insights and News

Prior Positions

Credentials

Areas of Focus

Services

Featured Insights