Matters
- Interpretation of state patient privacy and consent laws and related HIPAA preemption analysis for a broad range of purposes, including health information exchange consent structure, patient portals, and behavioral health integration efforts.
- Assisted multiple clients in responding to OCR investigations and data requests, and negotiated two Resolution Agreements and Corrective Action Plans with OCR.
- Prepares and drafts HIPAA policies and procedures and compliance documents for covered entities and business associates of various sizes.
- Assisted multiple clients in potential HIPAA breach investigations and required notifications.
- Assisted multiple mobile and virtual health providers in navigating privacy, security, telehealth, and consumer protection requirements.
- Assisted a health system client in governance, policy, and document review needs for the creation of a health information exchange partnership with another health system.
