Roy Wyman


Visiting, or interacting with, this website does not constitute an attorney-client relationship. Although we are always interested in hearing from visitors to our website, we cannot accept representation on a new matter from either existing clients or new clients until we know that we do not have a conflict of interest that would prevent us from doing so. Therefore, please do not send us any information about any new matter that may involve a potential legal representation until we have confirmed that a conflict of interest does not exist and we have expressly agreed in writing to the representation. Until there is such an agreement, we will not be deemed to have given you any advice, any information you send may not be deemed privileged and confidential, and we may be able to represent adverse parties.


For nearly 30 years, Roy Wyman has represented a variety of commercial entities on complex data privacy and security matters and related regulatory concerns. He counsels in-house legal departments, c-suites, boards of directors and IT teams as they navigate data privacy and cybersecurity issues arising under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), General Data Protection Regulation (EU GDPR), Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, state privacy laws like California Privacy Rights Act (CPRA) and other related statutes.

In addition to his practice focus on data privacy and security matters, Roy has extensive experience counseling clients working in and with the healthcare industry through regulatory and transactional matters, including Stark Law and Anti-Kickback Statute and other wide-ranging compliance matters.

Prior to joining Bass, Berry & Sims, Roy chaired the Privacy & Security Industry Group at Nelson Mullins LLP. He also previously served as the Chief Privacy Officer and Associate General Counsel of Regulatory for TeamHealth, Inc., one of the nation’s largest physician staffing companies. He also served as senior legal counsel for CVS Caremark Corp, leading in operational and regulatory matters for certain divisions of CVS Health, including as primary counsel for MinuteClinic retail and for CVS’s disease management, medical/pharmacy software and claims management subsidiaries.


International Association of Privacy Professionals

American Bar Association — Health Law Section

American Health Law Association (AHLA)

Wild Heart Meditation Center — Director