Navigating HIPAA: Guide to the Privacy Rule

Overview of Navigating HIPAA: Guide to the Privacy Rule

Panelists discuss the current state of security for the healthcare industry and the threats it faces, then introduce HIPAA and the entities it covers. They explain the information HIPAA protects and excludes, outline the Privacy Rule's permitted uses and disclosures, and review proposed privacy rule changes and their expected impact on healthcare cybersecurity.

What you’ll learn in Navigating HIPAA: Guide to the Privacy Rule

• Assess the state of cybersecurity in healthcare
• Identify HIPAA covered entities and protected information
• Apply the Privacy Rule's permitted uses and disclosures
• Anticipate proposed HIPAA Privacy Rule changes

Curriculum

1. 1. The Current State of Cybersecurity Law and Healthcare

   Threats facing healthcare entities in the digital age.

   Free preview
   Watch

2. 2. Health Insurance Portability and Accountability Act (HIPAA)

   Introduction to HIPAA and the entities it covers.

   Video coming soon

3. 3. Understanding the HIPAA Privacy Rule

   Protected information, permitted uses, and disclosures.

   Video coming soon

4. 4. Proposed Privacy Rules Changes

   Anticipated changes and their impact on healthcare cybersecurity.

   Video coming soon

Your instructors

Daniel B. Garrie

Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

Dave Summitt

Healthcare cybersecurity leader; former CISO, H. Lee Moffitt Cancer Center & Research Institute

Institute for Critical Infrastructure Technology (ICIT) · Florida Cancer Specialists & Research Institute

Dave Summitt is a healthcare cybersecurity leader who has served as a fellow of the Institute for Critical Infrastructure Technology. He was Chief Information Security Officer of the H. Lee Moffitt Cancer Center and Research Institute in Tampa, and joined Florida Cancer Specialists & Research Institute as Vice President of Cybersecurity in July 2022, a role he held as of 2023. A 21-year federal career with the Department of Defense preceded his move into healthcare security. He was named CISO of the Year by EC-Council in 2019 and testified before Congress that year on the impact of robocalling. He holds a master's in information security with a digital forensics concentration from Norwich University. At Legal Cyber Academy he teaches on HIPAA and healthcare privacy.

Afzal Khan

Global Chief Information Security Officer, OPKO Health, Inc.

OPKO Health, Inc.

Afzal Khan is Global Chief Information Security Officer at OPKO Health, Inc. He provides strategic direction on technology risk management, IT, OT and cybersecurity, taking a business-focused and risk-based approach to security decisions. He has more than 26 years of experience in technology security and risk management, and previously served as Global Head of IT Security, Risk Management and Compliance at Everest Reinsurance. His certifications include CISSP, CISA, CRISC, CHP, CDRE and MBCI. At Legal Cyber Academy, Afzal Khan teaches on HIPAA and the Privacy Rule, and on the GDPR.

Jennifer Coughlin

Founding Partner and Managing Member, Mullen Coughlin LLC

Mullen Coughlin LLC

Jennifer A. Coughlin is a founding partner and the managing member of Mullen Coughlin LLC, a law firm devoted exclusively to data privacy and security legal services. Her practice covers first-party data privacy and security incident response and third-party data privacy defence, including ransomware, business email compromises and other network intrusions, regulatory investigations, and pre-breach advisory compliance work for clients in healthcare and life sciences, financial services, hospitality and entertainment, retail and e-commerce, and professional services. She co-founded the firm in 2016, having previously been a partner in a full-service law firm's data privacy and cybersecurity practice group, and holds a J.D. from Widener University School of Law. At Legal Cyber Academy, Jennifer Coughlin teaches on proactively responding to cyber threats and the HIPAA Privacy Rule.