Partner Kristen Rosati Shares Health Data Privacy Insights as Panelist at 43rd National HIPAA Summit

Partner Kristen Rosati was recently invited to present at the 43rd National HIPAA Summit, a three-day virtual conference convening leaders in health data privacy, security, and compliance from across the country to discuss key regulatory and operational issues impacting today’s health care organizations. Kristen participated in the session, “HIPAA at 30: Lessons Learned and What’s Next for Healthcare Privacy and Security.” The panel examined how HIPAA has evolved over the last three decades and the emerging issues shaping the future of health information governance. Considered one of the nation’s leading “Big Data” and HIPAA compliance attorneys, Kristen has deep experience in data governance and strategy, data sharing for research and innovation, and biobanking and genomic privacy. Kristen is a Past President of the American Health Law Association...

Read MoreRead More

Mel Soliz Examines Legal and Policy Implications of CMS’ Health Technology Ecosystem on AHLA Podcast

Partner Mel Soliz recently joined an AHLA podcast exploring the CMS Health Technology Ecosystem — a new federal effort to modernize digital infrastructure and expand health data exchange beyond clinical settings. Alongside David Lee of Leavitt Partners, Mel discussed the initiative’s potential impact on privacy, governance, enforcement, and liability as interoperability standards evolve.  In the podcast, Mel assessed the legal significance of a more standardized FHIR-based exchange environment, noting that organizations may face greater scrutiny as data becomes more structured and exchangeable. She also spoke on potential interoperability challenges in an increasingly complex data privacy landscape, where HIPAA is only one part of an equation that also includes Part 2, Medicaid confidentiality requirements, federal privacy rules, and state-based laws.  Additionally, Mel addressed how these risks play out for providers, EHRs, payers, and patient-facing apps, with a focus on breach exposure in multi-party environments; downstream reliance on exchanged data; sensitivity around claims and clinical data; and gaps between consumer expectations and legal protections outside HIPAA-regulated settings. She encouraged organizations to align agreements and governance models with broader exchange goals...

Read MoreRead More

Mel Soliz Takes Virtual Stage at Two National Industry Forums to Discuss Computable Consent & State-Level Health Data Exchange Challenges

Partner Mel Soliz was recently invited to speak at two high-profile industry events: the 43rd annual HIPAA Summit and The Sequoia Project’s latest privacy and consent webinar. In her sessions, she and fellow health data privacy leaders explored how patients’ privacy and consent preferences can be operationalized in digital and networked environments. HIPAA Summit: At the three-day virtual conference convening health data privacy leaders from across the country, Mel shared her insights in a plenary session entitled “Advancing Computable Consent in the Digital Healthcare Economy,” presented by The American Health Information Management Association (AHIMA). She outlined where computable consent is headed and its implications for data use, governance, and trust as digital health infrastructure rapidly expands. The Sequoia Project Workgroup Webinar: Mel also spoke at...

Read MoreRead More

Amita Sanghvi Examines Federal Court Decision Vacating HIPAA Reproductive Health Privacy Regulations

A federal court’s ruling to overturn the U.S. Department of Health & Human Services’ (HHS) HIPAA reproductive health privacy protections has left many organizations uncertain over future compliance and patient data obligations. In response, Coppersmith Brockelman attorney and longtime Senior Attorney with the HHS Office of General Counsel Amita Sanghvi authored an article for the Arizona Society for Healthcare Attorneys (AzSHA) breaking down this ruling and its implications for regulated entities. The court’s decision in Purl v. HHS, N.D. Tex., 2:24-CV-228-Z, vacated the “HIPAA Privacy Rule to Support Reproductive Health Care Privacy,” (the 2024 Rule) that would have expanded restrictions on disclosing protected health information related to reproductive health care. While HHS did not appeal the ruling, a group of proposed intervenors did. Meanwhile, HHS continued...

Read MoreRead More

Amita Sanghvi & Kristen Rosati Explain What Reproductive Privacy Ruling Means for Covered Entities

The U.S. District Court for the Northern District of Texas recently issued a nationwide injunction, vacating a federal rule that strengthened HIPAA privacy protections for reproductive health care information. While the decision eases compliance burdens for covered entities, it also removes the legal shelter the rule had provided around disclosures of sensitive reproductive health care data. In the latest Coppersmith Brief, “Federal Judge Vacates HIPAA Reproductive Health Care Privacy Rule," Amita Sanghvi and Kristen Rosati break down the court’s reasoning and explore the implications for HIPAA-covered organizations moving forward. Advising clients on health data privacy, cybersecurity, and digital health innovation, Amita served as a senior attorney at the U.S. Department of Health and Human Services (HHS) before returning to private practice. During her time at HHS, she...

Read MoreRead More

Kristen Rosati Talks Data Strategy for Digital Health Companies at the American Telemedicine Association Annual Meeting

“Big Data” attorney Kristen Rosati spoke on a panel at the American Telemedicine Association’s Annual Conference, Nexus, on the pros and cons of moving direct-to-consumer functions within the HIPAA-regulated functions of a company. In the presentation, “The Cutting Edge of Digital Health Privacy Law,” Kristen spoke to the big shift in digital health companies’ approach to HIPAA compliance. While many digital health companies tried to avoid HIPAA in the past, the explosion of state consumer data privacy laws have started to change that calculus because all state laws to date have HIPAA exemptions. Kristen explained that complying with HIPAA reduces the complexity of compliance processes, and offers exemption from the Federal Trade Commission (FTC) health breach reporting rule, which has more stringent reporting obligations than HIPAA. Kristen...

Read MoreRead More