Health Data Protection and Management in Healthcare Transactions: HIPAA and State Law Compliance, Risk Mitigation

Mr. Laughton helps health care providers navigate the roadblocks of regulations, potential investigations, and enforcement. He has served many types of providers within the health care space, including facilities, physicians and other professionals, and ancillary service providers such as pharmacies and laboratories. He also works with startup ventures, entrepreneurial individuals and groups, and provider joint ventures. Mr. Laughton has worked on a wide array of regulatory and compliance matters, including HIPAA, Stark/Anti-Kickback, False Claims Act, and state law issues. In addition, he often helps clients with corporate and transactional matters, including M&As, reorganizations, and developing complex organizational and contractual structures for innovative ventures.

Ms. Metnick advises healthcare organizations and digital health companies on regulatory and data governance challenges at the intersection of privacy, security and artificial intelligence. She focuses on HIPAA, other health information laws, data strategy and security incident response—helping clients deploy innovative technologies while managing compliance risks across federal and state privacy frameworks. As the founder and leader of Sheppard Healthy AI, Ms. Metnick brings together a cross-disciplinary team dedicated to the compliant development, deployment and use of AI in healthcare. The initiative guides stakeholders through governance, vendor contracting, notice/consent and risk allocation—aligning emerging technologies with evolving laws, regulations and industry best practices. Ms. Metnick counsels hospitals, health systems, physician organizations, payors and technology companies on the full life cycle of health information and all related issues. Her work includes structuring data-sharing collaborations, developing privacy and security programs, responding to security incidents and navigating federal and state privacy laws. She is a Certified Information Privacy Professional/United States and a Certified Information Privacy Professional/Europe.