The nationally recognized Healthcare Privacy and Compliance team within the Digital Assets and Data Management (DADM) Practice Group advises leading healthcare organizations on complex privacy and cybersecurity matters.
The team's work includes ransomware attacks, business email compromises, regulatory investigations, HIPAA compliance, data governance, and artificial intelligence-related issues.
The role involves advising healthcare organizations on privacy and cybersecurity incidents (including ransomware attacks, business email compromises, and insider threats) and coordinating incident response efforts with forensic investigators, notification vendors, crisis communications professionals, and law enforcement.
Responsibilities include conducting breach assessments and counseling clients on state and federal notification obligations, assisting healthcare clients with investigations and inquiries from federal and state regulators (including OCR and state attorneys general), and counseling on HIPAA Privacy Rule and Security Rule compliance and broader privacy and data governance obligations.
The associate will develop and conduct incident response preparedness programs, tabletop exercises, and privacy and cybersecurity training, and advise clients on emerging issues involving artificial intelligence, digital health technologies, and evolving privacy regulations.
Associates receive substantial responsibility, direct client interaction, and mentorship from nationally recognized leaders, with opportunities to collaborate with lawyers across BakerHostetler’s privacy, cybersecurity, healthcare, litigation, and regulatory practices.
Preferred qualifications include HIPAA privacy and security experience, incident response or cybersecurity counseling experience, experience working with healthcare industry clients, and privacy certifications such as CIPP/US or related credentials.

Associate - Healthcare Privacy and Compliance

Trusted recruiters

Trusted recruiters

Trusted recruiters

Trusted recruiters