Maxine Thomas

Maxine Thomas represents and counsels clients in the health care and life sciences industries in complex business transactions and regulatory and compliance matters at the intersection of health, data privacy and security, and emerging technology, including generative and other AI (artificial intelligence) systems.

Maxine has significant experience in health data privacy and security, including compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and state privacy laws. She counsels clients on gap and risk assessments, incident and breach response, and strategies on data use and disclosures in traditional and digital health settings. Her work includes developing privacy and security compliance programs, facilitating breach analyses and public and government notices, and advising and supporting clients through complex data-related arrangements. She also defends clients in regulatory investigations on such matters.

Maxine also advises on emerging AI laws, guiding digital health and AI innovators through regulatory compliance, operational implementation, and risk mitigation. She has assisted clients in development and deployment of AI policies and practices, risk management, and public disclosures on uses of AI.

Maxine maintains an active pro bono practice, representing clients in asylum, adjustment of status, and employment authorization proceedings.

She is a member of the American Health Law Association and the California Society for Healthcare Attorneys.