The Healthcare Privacy and Compliance team advises leading healthcare organizations on complex and high-stakes privacy and cybersecurity matters, including ransomware attacks, business email compromises, regulatory investigations, HIPAA compliance, data governance, and artificial intelligence-related issues.
Advise healthcare organizations on privacy and cybersecurity incidents, including ransomware attacks, business email compromises, and insider threats, coordinating comprehensive incident response efforts with forensic investigators, notification vendors, crisis communications professionals, and law enforcement, and counsel on state and federal notification obligations after breach assessments.
Assist healthcare clients with investigations and inquiries from federal and state regulators (e.g., U.S. Department of Health and Human Services Office for Civil Rights), and counsel on HIPAA Privacy Rule and Security Rule compliance and broader privacy and data governance obligations.
Develop and conduct incident response preparedness programs, tabletop exercises, and privacy and cybersecurity training, while also advising clients on emerging issues involving artificial intelligence, digital health technologies, and evolving privacy regulations.
Collaborate with lawyers across BakerHostetler’s nationally recognized privacy, cybersecurity, healthcare, litigation, and regulatory practices.
Associates on the team receive substantial responsibility, direct client interaction, and mentorship from nationally recognized leaders in healthcare privacy and cybersecurity law.
Preferred qualifications include HIPAA privacy and security experience, incident response or cybersecurity counseling experience, prior experience with healthcare industry clients, government, regulatory, or judicial clerkship experience, and privacy certifications such as CIPP/US.

Associate - Healthcare Privacy and Compliance

Trusted recruiters

Trusted recruiters