Hannah Rose Zimmerman

Hannah’s deep research expertise and unique passion and perspective on privacy and security issues is an asset to Fey LLC’s clients. By applying her risk mitigation and privacy law experience, Hannah assists corporate clients in developing and implementing effective data privacy and security solutions, with a focus on conducting privacy and security compliance assessments; developing phased risk remediation recommendations; preparing privacy policies, procedures, and checklists; drafting data processing agreements; and providing assistance with projects related to legal holds, records retention, and information governance.

Prior to joining Fey LLC, Hannah practiced privacy law at a boutique healthcare firm, where she focused on providing legal guidance to healthcare providers. This experience provided Hannah with valuable experience developing privacy policies and terms of use for websites; completing HIPAA security risk assessments; preparing HIPAA policies and procedures and notices of privacy practices; reviewing authorizations for release of medical records and business associate contracts for HIPAA compliance; drafting corporate governance documents such as bylaws and employee handbooks; preparing written discovery responses and coordinating document productions in litigation and in regulatory investigations and hearings; and providing guidance on compliance with regulatory requirements for medical facilities and providers.

Hannah’s time spent interning with a Federal Judge in the U.S. District of Kansas and the Vice President of the Kansas Senate lends her a unique perspective on legal processes affecting clients, from the development of new laws to their ultimate enforcement.