Kristen Rosati Examines New Token-Based Data Privacy Weaknesses in HealthVerity Panel Discussion

Partner Kristen Rosati recently joined a panel to assess newly discovered vulnerabilities in token-based methods used to de-identify health information. The discussion, hosted by HealthVerity, was prompted by an October article published in the Journal of the American Medical Informatics Association, which revealed critical weaknesses in common privacy-preserving record linkage techniques. The panelists explored which tokens appear most susceptible to re-identification attacks. The discussion also outlined practical risk mitigation strategies and emerging innovations aimed at strengthening privacy architecture to support more secure, compliant data exchange. In addition to Kristen, the panel included Andrew Kress, CEO of HealthVerity; Austin Eliazar, PhD, Chief Data Scientist at HealthVerity; and Bradley Malin, PhD, Accenture Professor and Vice Chair for Research Affairs at Vanderbilt Medical Center. HealthVerity, a technology company that provides one...

Read MoreRead More

Kristen Rosati Shares Insight on Rising Threats of Ransomware Mailed Physically to Health Care Organizations

A recent string of mailed extortion demands has caught health care organizations off guard, signaling a shift in ransomware tactics. Partner Kristen Rosati was featured in a Healthcare Risk Management article, emphasizing the importance for health care organizations to prepare for these emerging threats. The paper ransomware letters claimed sensitive data had been stolen and demanded more than $250,000 in Bitcoin within 10 days. Although an increasing number of health care staff now receive training to avoid suspicious links and spot phishing emails, physical letters tend to feel more legitimate and urgent than these digital phishing tactics. This method also bypasses the expensive email filters and security systems set up to catch digital threats, making it even more difficult to detect. “Snail mail doesn’t leave a digital...

Read MoreRead More

Mel Soliz joins SHARES Advisory Board as Group Awarded National Institute of Health Grant

Mel Soliz has joined the Substance use HeAlth REcord Sharing (SHARES) Advisory Board as it kicks off its $3.2 million, five-year National Institute of Health (NIH) grant. Formed under ASU’s College of Health Solutions, SHARES uses feedback from patients and providers on substance use disorder (SUD) data sharing and health care to inform policies on data privacy and confidentiality. The board also analyzes the implementation and impact of automated SUD data segmentation to improve data sharing and interoperability between healthcare institutions and service delivery. Mel ― who is also recognized by Chambers USA©️, Best Lawyers©, and Southwest Super Lawyers: Rising Stars© ― practices regulatory health law, focusing on compliance with health data privacy, access and interoperability laws (such as the Information Blocking Rule and CMS interoperability mandates,...

Read MoreRead More
Attorneys Kristen Rosati and Nate Kunz

Kristen Rosati & Nate Kunz Share Insights with the Arizona Society of Healthcare Attorneys on Online Tracking Tools for Health Care Organizations

After STAT Health News published an investigation into health care organizations' use of online tracking technologies, such as Meta Pixel, the Office for Civil Rights and the Federal Trade Commission launched their own investigations. The FTC has issued substantial fines, and now class actions are being filed across the U.S. The Arizona Society of Healthcare Attorneys hosted Kristen Rosati and Nate Kunz to provide insights on the regulatory and legal issues arising from health care organizations’ use of online tracking technologies. They explained online tracking compliance requirements for HIPAA, Federal Trade Commission regulations, and state data privacy laws. They also discussed best practices for protecting attorney-client privilege and the attorney work product while conducting internal investigations. Kristen, a past President and Fellow of the American Health Law...

Read MoreRead More

Thought Leader Mel Soliz Tapped by AzHIMA and The Health Management Academy to Share Latest Insights on Changes in Health Information Interoperability and Privacy

Accessing health information is becoming increasingly more common through electronic means and devices like patient portals and third-party applications, but it brings with it concerns regarding privacy, security, and the potential misuse of sensitive medical data. Mel Soliz — Partner and leader of the firm’s interoperability practice — delivered a series of presentations in June at the Arizona Health Information Management Association (AzHIMA) Annual Conference in Phoenix and The Health Management Academy Conference in Chicago. The topics focused on federal efforts to increase interoperability and how those efforts affect information sharing, including developments in electronic health information data policies, information blocking, the Trusted Exchange Framework and Common Agreement (TEFCA), and the use and disclosure of minor health information in compliance with state and federal data laws...

Read MoreRead More
Attorneys Kristen Rosati and Nate Kunz

Kristen Rosati & Nate Kunz Discuss Updated Guidelines on Health Care Organizations’ Use of Online Tracking Tools

Regulators have released new guidelines regarding healthcare organizations’ use of online tracking technologies in marketing practices. In their presentation to the Arizona Hospital and Healthcare Association, Kristen Rosati and Nate Kunz explained that these tools have been under increased scrutiny ever since STAT Health News released their investigation into online tracking. They also covered compliance requirements for HIPAA, Federal Trade Commission regulations, and state data privacy laws.  In anticipation of litigation related to the use of online tracking tools, they also covered how to conduct internal investigations in a manner to preserve attorney-client privilege. Kristen, a past President and Fellow of the American Health Law Association, is a nationally sought-after expert and speaker on “big data” and HIPAA compliance.  She has been leading a number of...

Read MoreRead More