Continuing Education Information Sheet

• Identify the five titles of HIPAA and their scope
• Apply the HIPAA Privacy and Security Rule
• Understand HIPAA enforcement, violations, and proposed amendments
• Describe the HITRUST Common Security Framework (CSF)

Intended audience: Attorneys advising healthcare businesses on cybersecurity risk and compliance.

Level: intermediate

Prerequisites: Part 1 of this two-part series recommended.

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Healthcare-relevant subject matter — physicians may self-claim AMA PRA Category 2 Credit™ where the activity is relevant to their practice.

• CLE (attorneys)up to 1.1 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.1 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CME — AMA PRA Category 2up to 1.1 hr (60-min basis)

  Physicians may self-document relevant activities as AMA PRA Category 2 Credit™, which you claim yourself based on participation. This course is NOT certified for AMA PRA Category 1 Credit™ — Category 1 requires an ACCME-accredited provider, which Legal Cyber Academy is not.