Thomas Lopez
About Thomas Lopez
Thomas Lopez serves as the Senior Privacy Counsel and HIPAA Privacy Officer at Thomson Reuters, where he has worked since 2019. He has extensive experience in privacy law, contract management, and compliance, with previous roles at Thomson Reuters, Mille Lacs County Attorney's Office, and Rinke Noonan Law Firm.
Current Role as Senior Privacy Counsel
Thomas Lopez serves as Senior Privacy Counsel and HIPAA Privacy Officer at Thomson Reuters, a position he has held since 2019. In this role, he manages HIPAA training and compliance activities for U.S. products and supports cross-functional HIPAA breach response initiatives. He is responsible for developing and maintaining the enterprise Data Privacy Program, ensuring that privacy by design principles are integrated into product design and market strategies. His work involves monitoring the privacy landscape for significant developments and providing timely analysis to key stakeholders.
Previous Experience at Thomson Reuters
Thomas Lopez worked at Thomson Reuters in various capacities from 2014 to 2019. Initially, he served as Commercial Contracts Counsel - Legal for one year, followed by four years as Commercial Contracts Counsel - Legal Managed Services. During his tenure, he streamlined commercial go-to-market opportunities by reducing barriers to contract with customers and vendors while managing business risks associated with contract management.
Legal Career Background
Before joining Thomson Reuters, Thomas Lopez held several legal positions. He worked as ACA Chief Civil Counsel at Mille Lacs County Attorney's Office from 2003 to 2012, where he served for nine years. Following this role, he was an Associate Attorney at Rinke Noonan Law Firm from 2012 to 2014. Additionally, he gained experience as a Law Clerk at Honeywell from 2000 to 2002.
Education and Expertise
Thomas Lopez possesses extensive expertise in privacy law and compliance, particularly related to HIPAA regulations. His professional background includes managing privacy training and compliance, assessing data risks in mergers and acquisitions, and advising on local privacy laws. He has also delivered bespoke training to enhance local knowledge and expertise within organizations.