Ms. Chestler serves as the chair of the Data Protection, Privacy and Cybersecurity Team at Baker Donelson. She concentrates her practice in privacy, security, and information management issues, including compliance, contract negotiation, and corporate transactions matters. She joined Baker Donelson after a distinguished career as in-house counsel and privacy officer to several large public and private companies, including several managed care organizations and health care companies. Ms. Chestler is a Certified Information Privacy Professional: United States (CIPP/US) and has also attained certification as a Qualified Technology Expert (QTE).
In her practice, Ms. Chestler serves as a trusted advisor to clients and routinely counsels them on their technology and data strategy with a strong base in digital health, life science, and general health care. She counsels clients on technology, data privacy, and security matters that arise from federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLB), Fair Credit Reporting Act, Fair and Accurate Credit Transactions Act, Family Educational Rights and Privacy Act (FERPA), state data breach laws, and the Payment Card Industry (PCI-DSS) requirements. Ms. Chestler also counsels clients on global data protection laws, including the General Data Protection Regulation (GDPR). She has significant experience assisting companies in developing comprehensive privacy and security programs and working with management to identify risk management issues, many times in anticipation of corporate transactions. She assists clients in identifying, evaluating, and managing risks associated with privacy and information security practices of companies and third-party service providers. Ms. Chestler also counsels clients regarding incident response programs, including the development of the incident response plan, investigation, and response.
In addition, Ms. Chestler drafts and negotiates technology agreements, including Master Services Agreements (MSAs), Software License Agreements, Software as a Service (SaaS) agreements, and Professional Services Agreements.
She routinely assists clients in complex health information and technology issues such as the negotiation of complex information technology and partnership agreements, including health information exchange (HIE) participation, electronic health record (EHR) negotiation, data use agreements, blockchain, artificial intelligence (AI), adoption of and compliance with Health Information Technology for Economic and Clinical Health Act (HITECH) and meaningful use requirements, and the interoperability and information blocking regulations. She assists digital health and consumer application companies in navigating the complexities of health care technology strategy, agreements, and compliance concerns.
Ms. Chestler worked as in-house counsel for more than 15 years for several managed care organizations, including CareFirst BlueCross Blue Shield.
Follow her on X @alchestler.