Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Joyce Ackerbaum Cox Comments on New Florida Law Regarding Restaurant Surcharges

Nuclear Verdicts and the Expanding Concept of the ‘Product’ (Chambers and Partners – Product Liability & Safety 2026)

Ed McAndrew Comments on Third Circuit’s Constitutional Privacy Ruling in Death Photo Case

ADventures in Law 2026 Webinar – Keeping Your Brand Off the Bench: Avoiding Red Cards in NIL Partnerships — What Every In-House Lawyer Should Know Before Signing Their First Athlete or Celebrity Deal

Aleksandra's practice is devoted to healthcare, and she has assisted hundreds of healthcare organizations and business associates through privacy and data security incidents, regulatory inquiries and complex Health Insurance Portability and Accountability Act (HIPAA) compliance issues.

Proactive Privacy Law Compliance

Focused on state and federal healthcare privacy and data security laws, Aleksandra has counseled hundreds of entities in the healthcare industry, from HIPAA-covered providers and payers to Federal Trade Commission-regulated consumer health applications to vendors processing highly sensitive health data. She excels at breaking down complex legal frameworks into understandable conversations and uses her deep knowledge of her clients’ business realities and the relevant regulations to “get to a yes” with the least amount of risk. Aleksandra regularly provides meaningful counseling to entities of all sizes on the full spectrum of HIPAA Privacy Rule issues, navigating layered state privacy regimes, 42 C.F.R. Part 2 compliance, health data secondary uses, artificial intelligence program creation and governance, and interoperability framework issues.

Beyond day-to-day compliance, Aleksandra is deeply involved in strategic privacy work across the healthcare ecosystem. She leads privacy diligence for mergers, acquisitions and other strategic transactions, helping buyers and sellers evaluate risk, assess privacy and cybersecurity maturity, and negotiate operationally sound representations, warranties and indemnities. She also designs and negotiates complex healthcare data licensing programs, working closely with clients to create scalable, compliant data assets and partnerships.

Incident Response

When a privacy and/or security incident occurs, Aleksandra takes an arms-linked approach with clients, coordinating a skilled team - including forensic, public relations and negotiations professionals - to quickly help contain the incident, reduce public and regulatory scrutiny, guide investigations and protect the clients’ reputations.

Regulatory Investigations

Aleksandra has directed responses to hundreds of federal and state regulatory inquiries involving alleged violations of HIPAA and state data breach and privacy laws. Her early-career privacy class action litigation experience strengthens her ability to craft defensible narratives, present effectively to regulators and resolve complex or contentious compliance questions with credibility, clarity and strategic sensitivity.

Proactive HIPAA Compliance

Aleksandra is a sought-after business partner for privacy and compliance issues. Clients appreciate her ability to leverage her wealth of regulatory and client experiences to help the client find solutions that are bespoke to their organization and particular challenge.

Aleksandra brings a strategic advantage to the defense of class action litigation, having started her legal career as a plaintiffs’ attorney focusing on consumer data privacy class actions. Her strengths in cybersecurity are bolstered by her representation of startups and closely held technology companies in a variety of commercial disputes.

core/freeform

J.D., John Marshall Law School, 2010, 

B.A., Columbia College, 2006, 

<ul>
<li>Cybersecurity Docket Incident Response 40 (2021 to 2022)</li>
<li>Cybersecurity Docket &#8220;Incident Response 50&#8221; (2023)</li>
<li>Illinois Super Lawyers &#8220;Rising Star&#8221; (2013 to 2025)</li>
</ul>

Chicago

Aleksandra Vold, Jennifer Mitchell Moderate Global Compliance Panel at Consero’s Chief Privacy Officer Forum

The Privacy Strategist – Navigating AI Compliance Amid Regulatory Chaos

Aleksandra Vold Comments on New Federal Portal to Report Substance Use Disorder Breaches

Aleksandra Vold Provides Insight into Substance Abuse Privacy Rules in Healthcare Info Security Interview

Data Counsel

There’s a New Sheriff in Town (and It’s HHS OCR): Time To Refocus on Part 2 Compliance Before February 2026

Regulatory Horizons

Regulatory Horizons: AI & Digital Health – FDA Evolving Oversight

The Data Stream

The Data Stream – Episode 5 with Aleksandra Vold

Aleksandra Vold Comments on Dismissal of Challenge to HIPAA Privacy Rule in Healthcare Info Security

USA: OCR Authority in HIPAA Enforcement (OneTrust DataGuidance)

Aleksandra Vold Takes Part in Webinar on Evolving AI Landscape

California Court of Appeal Reins in CDPH’s Misuse of Strict Liability in Hospital Privacy Breach Cases

Colorado’s Latest Privacy Law: What Schools, Hospitals and Libraries Need To Know

Updated HIPAA FAQs: Reaffirmation of the Obvious

Aleksandra Vold Comments on Recent Privacy Requirements in Colorado and Texas

Texas Passes New Law Regulating Electronic Health Records and the Use of AI by Healthcare Professionals

Aleksandra Vold Remarks on Delays in Data Breach Notification in Healthcare Info Security Article

Aleksandra Vold Comments on Recent HIPAA Guidance from Health and Human Services

Aleksandra Vold Comments on Texas Court Ruling Vacating 2024 Changes to HIPAA in Healthcare Info Security

Aleksandra Vold Takes Part in Panel at HIPAA COW Spring Conference

BakerHostetler Illinois Attorneys Selected as Super Lawyer, Rising Stars

Aleksandra Vold Comments on Challenges Regarding HIPAA Reproductive Health Info

DSIR Deeper Dive: Tracking the Crackdown on Tracking/Pixel Technologies: Web Litigation and Regulatory Landscape – Part 2

DSIR Deeper Dive: Tracking the Crackdown on Tracking/Pixel Technologies: Web Litigation and Regulatory Landscape – Part 1

Aleksandra Vold Discusses HIPAA and AI Use in Healthcare Organizations in G2 Intelligence Report

It’s Spooky Season: HHS OCR Finalizes Two Investigations into Ransomware Incidents, Providing Nightmare Material for Acquiring Entities

Aleksandra Vold Shares Perspective on Regulatory Change in G2 Intelligence Article

Northern District of Texas Flashes the ‘Blue Lights’ on OCR’s Pixel Guidance

Diving Deeper into the Revised Health Breach Notification Rule

It’s Not Just About Dobbs: HHS Issues Final Rule on Reproductive Health

FTC Vastly Expands Reach of the Health Breach Notification Rule

Casie Collignon, Aleksandra Vold Moderate Panels at NetDiligence Cyber Risk Summit

Aleksandra Vold Comments on FTC’s Health Breach Notification Rule

Lipstick on a Pig: OCR’s Cosmetic Revisions to Guidance on Tracking Technology in Healthcare Fail to Address Fundamental Issues

HHS OCR Provides Annual Report to Congress Detailing 2022 Enforcement Activities

Aleksandra Vold Moderates Panel at HIMSS24 Provider Executive Summit

Webinar: The Privacy Strategist – Consumer Health Data

The Long-Awaited Part 2 Modifications Are Finalized with New Obligations for Part 2 Providers and Less Friction for Sharing Patient Information

HHS OCR Announces Largest Civil Monetary Penalty Imposed Since 2021 for Snooping Incident

With new advisory committee, FDA signals increased focus on digital health, Vold says

Health Law Update

FDA Forms Digital Health Advisory Committee to Navigate Emerging Technologies

Cybersecurity, Privacy and Data Protection (Ethics): Essentials for Lawyers

Aleksandra Vold Discusses Class Actions Involving Data Privacy Violation Claims

Ted Kobus, Lynn Sessions and Aleksandra Vold Again Named Top Cybersecurity Incident Responders

Aleksandra Vold Speaks About the Evolving Cybersecurity Insurance Landscape

With New Enforcement Action, FTC Warns Against Health Information Being Used for Advertising Purposes

HHS Announces New Divisions to Address Weighty Case Load

Latest FTC Health Privacy Case Sheds Light on Agency Health Privacy Approaches

OCR Guidance on Use of Tracking Technologies Warrants Review of Website Tech

HHS Proposes New Rule Aligning Part 2 Regulations with HIPAA

Aleksandra Vold and Stefanie Ferrari Address Ad Tech at Deja-Mooo

Aleksandra Vold, Nichole Sterling Address Incident Response at Georgetown Advanced eDiscovery Institute Pre-Conference Webinar Series

Employment Law Spotlight

For California Electronic and Computing Services Companies, New Processes Required Before Responding to Warrants, Subpoenas and Other Information Requests

Aleksandra Vold Speaks About Incidence Response Readiness in Healthcare

What’s Old Is New Again: OCR Announces $300,000 Settlement Related to Improper Disposal of Physical PHI

‘Unboxing’ the New NIST Guidance: NIST Publishes Significant Update to Healthcare Cybersecurity Guide

Dobbs on Demand

Dobbs on Demand: Healthcare Privacy on the Line in a New Legal Setting

Dobbs on Demand

HHS OCR Guidance to 60,000 Retail Pharmacies: Refusal to Fill Rx Based on Potential Pregnancy Termination Concerns Is a Civil Rights Violation, Will Be Investigated

Services

Digital Assets and Data Management

Healthcare Privacy and Compliance

Digital Risk Advisory and Cybersecurity

Russia-Ukraine War Resource Center

Employee Privacy

Artificial Intelligence (AI)

<ul>
<li>Handled data breaches ranging from a single record loss to 500 million records lost with multi-national notification requirements, and attacks ranging from drive-by ransomware injections to pervasive network compromises by international hacking groups, which led to personal and company extortion attempts.</li>
<li>Counsels some of the nation&#8217;s largest and most prestigious healthcare organizations on HIPAA Privacy Rule and Security Rule compliance.</li>
<li>Coordinates all aspects of data security incident response, from intake and vendor selection (forensics, PR and notification), to supervising and directing forensic investigations and designing public disclosure content and strategy.</li>
<li>Assisted federal law enforcement investigations for two separate hospitals that resulted in the conviction and imprisonment of internal bad actors.</li>
<li>Assists in management, investigation and response related to regulatory inquiries from state attorneys general, state regulators and HHS OCR. Coordinates and participates in clients’ internal investigations, document and policy reviews, and drafts formal responses to regulatory inquiries.</li>
<li>Works with clients to understand system posture and regulatory environment to counsel on best practices, regulatory requirements and industry standards. Drafts and revises policies and procedures related to privacy, Incident Response Plans, Information Governance policies and Data Mapping initiatives to mitigate cyber risks. Counsels companies in various industries on website best practices, as well as international and domestic requirements for terms of use, and privacy policies.</li>
<li>Counsels both acquiring/investing and target companies on the scope of due diligence requests and responses related to data privacy and data security reps and warranties.</li>
</ul>

Aleksandra Vold

Aleksandra Vold

Experience

Recognitions and Memberships

Insights and News

Prior Positions

Credentials

Areas of Focus

Services

Featured Insights