HIPAA, Interoperability & Recent HHS Guidance
Approaching 30 years since it was enacted into law in August 1996, HIPAA’s fundamentals of privacy and security remain the same; however, as technology and cybersecurity threats have emerged, so the regulations have evolved. Additionally, the increased emphasis on substance use disorder (SUD) in light of the opioid crisis, brings renewed focus on 42 CFR Part 2 – a regulation enforced by SAMHSA that pre-dates HIPAA by nearly 20 years. The purpose of this webinar to provide the evolution of HIPAA, core requirements of the Privacy Rule and the Security Rule, recent 2025 HHS Guidance and interoperability nuances and requirements.
Learning Objectives
Appreciate HIPAA and related laws and regulations
Understand 42 CFR Part 2 and how it intersects with HIPAA and its distinguishing features
Learn about recent guidance
Learn about interoperability, changes and upcoming implementation requirements
Return to compliance requirements and how the guidance and interoperability items should be included
Learn the interplay between HIPAA, the HITECH Act, and the 21st Century Cures Act
Appreciate HR 7898 and understand ways to mitigate penalties from government enforcement actions
Understand privacy concerns post-Roe in the Dobbs era
Recognize the Federal Trade Commission’s role in protecting data
Distinguish between consumer and patient privacy protections
Reaffirm the continued relevance of the Privacy Rule, Security Rule, and Breach Notification Rule
Identify the criminal side of HIPAA, including aggravated identity theft
Apply practical risk mitigation strategies in healthcare settings
Understand the importance of an annual risk analysis and how to conduct one effectively
Areas Covered in the Session
HIPAA
42 CFR Part 2 & SAMHSA
Evolution of HIPAA and Related Laws and Regulations
Recent HHS Guidance
Interoperability – Definition, Implementation and Security & Privacy Considerations
Compliance
Risk Mitigation
HR 7898 Requirements and Penalty Mitigation
Cybersecurity in Healthcare
Healthcare as Critical Infrastructure
Recent Cases and Enforcement Trends
Data Tracking and Privacy Implications
Consent Versus Authorization
Key Congressional Developments
Live Q&A Session
Suggested Attendees
Lawyers
Compliance Professionals
IT Professionals
Healthcare Industry Participants
Providers
Consultants
Hospital Executives – CEOs, COOs, CFOs, CNOs, and CMOs
Healthcare Provider Board Members
Attorneys Representing Healthcare Providers and Practitioners
Chief Compliance Officers
Government Organizations
Defense Counsel
Relator’s Counsel
Billers and Coders
Cybersecurity Professionals and Consultants
Anyone Working in Healthcare
About the Presenter
Rachel V. Rose, JD, MBA is a Principal with Rachel V. Rose – Attorney at Law, P.L.L.C. (Houston, TX). Ms. Rose successfully advises clients on compliance, transactions, government enforcement actions and litigation in healthcare, cybersecurity, corporate and securities law, while successfully representing plaintiffs in False Claims Act and Dodd Frank whistleblower cases.
A Fellow of the Federal Bar Association and the American Bar Association. Currently, she serves on the Foundation Federal Bar Association Board of Directors, is a Member and Immediate Past-Chair of the Federal Bar Association’s Government Relations Committee, and an advisory board member of the Federal Bar Association’s Qui Tam Section. Ms. Rose is the co-editor of the American Health Law Association’s Enterprise Risk Management Handbook for Healthcare Entities (2nd Edition), as well as a co-author of the ABA’s books The ABCs of ACOs, What Are International HIPAA Considerations? and International HIPAA, Privacy, and Security Law Considerations. She has also co-authored a variety of chapters for medical textbooks.
In addition to being extensively published and a sought-after presenter and quoted expert, Ms. Rose holds an MBA with minors in healthcare and entrepreneurship from Vanderbilt University, and a law degree from Stetson University College of Law, where she graduated with various honors. She also holds an Executive Certificate in Negotiation from Harvard Law School.
She has been named consecutively to SuperLawyers (healthcare), the Texas Bar College, the National Women Trial Lawyers Association’s Top 25, Houstonia Magazine’s Top Lawyers (healthcare), the National Trial Lawyers Association’s Top 100, The Nation’s Top One Percent, as well as a two-time 1st Healthcare Compliance Top Presenter and NBI Distinguished Faculty. Ms. Rose is also an Affiliated Member with the Baylor College of Medicine’s Center for Medical Ethics and Health Policy, where she teaches bioethics.