Watkins & Eager offers comprehensive advice on managing health information privacy and security and on compliance with the Health Insurance Portability and Accountability Act (HIPAA). Our professionals work with a range of clients, including healthcare providers, health plans, insurance companies, drug and device manufacturers, and consulting firms. Our experience includes:
- Determining whether HIPAA applies
- Identifying all uses and disclosures of protected health information
- Performing and assisting with privacy/security audits and gap analyses
- Designing and implementing HIPAA training programs
- Drafting and updating contracts as the law changes, including with customers and vendors (e.g., business associate agreements, confidentiality provisions, security requirements, etc.)
- Identifying “business associates” and drafting and amending contracts with them
- Establishing disciplinary policies for persons and entities that exhibit non-compliance
- Representing clients who experience a breach and counseling through the breach notification rules