Counsel built on twenty years of understanding healthcare from the inside.
Before founding this practice, Roshal spent her career inside the healthcare industry navigating regulation firsthand — which is exactly why clients bring her their hardest questions first.
The Short Version
Roshal Marshall is a healthcare and technology attorney who advises healthcare practices, health systems, and digital health companies across regulatory, transactional, and strategic matters. Her work spans privacy and HIPAA compliance, cybersecurity, healthcare regulatory guidance, AI governance, FTC and data governance matters, and contract and transactional advisory for organizations at every stage of growth.
She comes to advisory work from inside the companies she now serves. Roshal most recently served as Vice President, Deputy General Counsel – Strategy & Innovation and Chief Privacy Officer at Verily, the health technology company formerly part of Alphabet, where she led the product, privacy, security, and intellectual property legal teams and the enterprise privacy office. Before Verily, she was Managing Chief Counsel at McKesson Corporation. She has built AI governance frameworks for clinical products, led FDA regulatory product strategy, handled FTC health data matters, and negotiated the deals that healthcare enterprises are built on.
What sets her practice apart isn’t just the legal background — it’s the operational fluency. Roshal understands how healthcare organizations actually run day to day, which means the advice she gives is built for the real world, not just the statute book.
She founded Roshal Marshall Advisory to give healthcare organizations and the businesses that serve them a single point of contact they can trust with their most consequential decisions — someone who understands both the legal exposure and the operational reality behind it.
“Every matter that comes through this practice is handled by Roshal directly — not passed to an associate, not delegated for the parts that don’t need a partner’s attention.”
That’s a deliberate choice, not a limitation of a smaller practice. Healthcare compliance and regulatory work carries real consequences, and the organizations navigating it deserve continuity — the same person who understood the full context of your situation on day one is still the person advising you on day two hundred.