Apurva Dharia
Associate
Apurva Dharia works on the firm's privacy and security team, focusing on health information technology matters. He assists clients in developing policies and procedures for data collection, storage, use, and disclosure and provides risk assessments and mitigation strategies for a range of issues involving data processing.
With a background that includes direct patient-care experience and federal health policy development, Apurva takes a holistic approach in advising clients on unique and novel legal concepts in a highly innovative sector. Apurva strategically negotiates and drafts licensing terms, data use agreements (DUA), data protection agreements (DPAs) and business associate agreements (BAA) that enable clients such as health systems, education technology vendors, and information technology (IT) and cloud service providers (CSPs) to secure personal information in compliance with evolving privacy laws while permissibly leveraging data to develop innovative solutions to complex problems.
Apurva also advises clients across industries on the intricacies of state, federal, and international privacy and security law, with particular focus on COPPA (Children's Online Privacy Protection Act), FERPA (Family Educational Rights and Privacy Act), and other regulations in the emerging areas of children's privacy and cybersecurity.
Health information privacy compliance
Develops HIPAA compliant privacy and security policies and procedures, notices of privacy practices, and data retention policies for health systems and healthcare vendors, including telemedicine and telepharmacy clients.
Health data licensing and contracting
Drafts and negotiates master service agreements and data licensing and collaboration agreements between pharmaceutical manufacturers and artificial intelligence and machine learning-based healthcare startups.
Develops and negotiates Business Associate Agreements (BAAs) on behalf of HIPAA Covered Entities, Business Associates, and Subcontractors.
State, federal, and international data privacy and security compliance
Breach response
Deep healthcare regulatory knowledge*
Admitted to Practice
- District of Columbia, 2023
- Maryland, 2016
Education
- B.S., Biological Sciences; B.S., Community Health, University of Maryland, College Park, 2012
- J.D., University of Maryland Francis King Carey School of Law, 2016
- Health Law Certificate
Professional Recognition
- Named "One to Watch" by Best Lawyers in Health Care Law, 2024-2025
Background
- Associate, Quarles & Brady LLP, Washington, D.C., 2022-2023
- Lead Policy Analyst, MITRE, McLean, Va., 2019-2022
- Senior Healthcare Analyst, Enterprise Science and Computing (ESAC Inc.), Rockville, Md., 2011-2019
- Legal Extern, Technology Transfer Office, National Human Genome Research Institute (NIH-NHGRI), Rockville, Md., 2015