Leads McDermott’s UK Health and Life Sciences Practice Group  

Advises on global M&A and joint ventures across health services, pharma and life sciences, digital health, and health technologies  

Counsels UK and international clients on NHS and public law procurement, regulatory, and contracting matters, including reimbursement and market access  

Advises strategic and private equity investors on transactions and investments in health and life sciences 

Daniel F. Gottlieb counsels a wide range of healthcare industry clients, including healthcare providers, health plans, health information technology vendors, life sciences companies and data aggregators. He is sought out for his legal knowledge and practical approach on data protection, interoperability, and complex data and software licensing transactions, collaborations and strategic initiatives.

Daniel counsels healthcare clients regarding compliance with US federal and state and international privacy, security, breach notification and information blocking laws, including the Health Insurance Portability and Accountability Act (HIPAA), 21st Century Cures Act, California Consumer Privacy Act (CCPA), Telephone Consumer Protection Act, CAN-SPAM and EU General Data Protection Regulation (GDPR). He offers guidance on the intersection of privacy and security requirements with information blocking prohibitions under the 21st Century Cures Act and Medicare rules impacting the deployment of health information technology.

Daniel has deep experience regarding requirements for de-identification, anonymization and other secondary uses of health information under HIPAA, CCPA and GDPR. Daniel regularly advises clients regarding their response to cyberattacks and other security breaches, and defends against subsequent investigations by state regulators and the US Department of Health and Human Services Office for Civil Rights.

He advises healthcare clients on all aspects of data and software licenses and other agreements for the acquisition of electronic health record (EHR) systems and other mission-critical health IT and health content. He drafts and negotiates hosting, cloud computing and IT service agreements, as well as license agreements for health data and other health content.

Daniel assists with compliance program implementations, compliance audits, and government program overpayment and refund matters, including drafting billing compliance policies and procedures. He also counsels clients on compliance with Medicare and Medicaid reimbursement, fraud and abuse laws; the PhRMA Code on Interactions with Health Care Professionals; and the AdvaMed Code of Ethics on Interactions with Health Care Professionals.

Pilar Arzuaga has over a decade of experience advising companies across various industries on cybersecurity governance, data protection, artificial intelligence, and digital regulation. She works with clients in sectors such as telecommunications, media, IoT, cloud services, health, life sciences, robotics, ad tech, retail, and finance, providing strategic guidance to navigate complex regulatory landscapes and manage risks effectively.

Pilar’s expertise is enriched by her significant in-house experience at leading global companies, where she focused on privacy, product compliance, and cybersecurity. Her practical, business-oriented approach ensures that legal requirements are aligned with operational goals, bridging the gap between compliance and business strategy.

Pilar advises on a wide range of issues, including:

• Online Safety Act / DSA governance: Recently advised on cross-jurisdictional assessments for major digital platforms (including large social and immersive-content providers) on the UK Online Safety Act and EU Digital Services Act, focusing on practical implementation and regulator-readiness.
• Management-body accountability: Advised on Board and senior-leadership responsibility frameworks, including Ofcom-style “duty of care” mapping, internal reporting structures, and accountability statements for global tech companies.
• Risk-assessment frameworks: Designed and operationalized systemic risk-assessment models integrating OSA and DSA transparency-law obligations, ensuring interoperability and proportionality across jurisdictions.
• Content governance and safety management: Supported the creation of safety management plans, risk registers, and escalation workflows aligned with both Ofcom and DSA transparency expectations.
• Cross-regulatory insight: Experience bridging privacy, online safety, and AI governance to align compliance strategies multiple jurisdictions
• Cybersecurity Governance: Developing and implementing frameworks to comply with international regulations and protect critical assets.
• Incident and Data Breach Management: Guiding organizations through data security incidents, from investigation to reporting and mitigation.
• Privacy and Product Compliance: Ensuring data protection by design in new product launches and ongoing operations.
• Artificial Intelligence (AI): Providing comprehensive advice on AI governance, risk assessment, and compliance with evolving regulations.
• Digital Regulation Compliance: Offering strategic counsel on compliance with the Digital Services Act, Data Act, NIS 2 Directive, and other key regulations.

Pilar could also cover:

• Initial legal and governance assessment for obligations under the UK OSA and DSA frameworks
• Evaluation of management-body oversight and accountability, including Board-level duties and internal governance structures.
• Design of a cross-jurisdictional risk-analysis and mitigation framework, covering systemic risk, content moderation, child safety, and transparency.
• Development or refinement of core compliance documentation (risk registers, accountability statements, transparency reports, Board briefings and training to management bodies).
• Gap analysis and enhancement recommendations for existing online-safety and trust-and-safety processes.
• Executive workshop or tabletop exercise to prepare for Ofcom or EU regulator engagement.

Before joining McDermott, Pilar gained invaluable experience at a top-tier international law firm specializing in data and technology, further strengthening her ability to deliver practical solutions to her clients.

Pilar also maintains an active pro bono practice, assisting organizations with their cybersecurity, data protection, AI, and broader compliance needs.