Offshoring Patient Health Data: Navigating Complex Federal and State Privacy Regulation, Mitigating Client Risk

Ms. Metnick is a partner in the Corporate Practice Group in the firm's Chicago office and a member of the Healthcare and Privacy & Cybersecurity Teams. She represents a range of healthcare industry clients, including hospitals and health systems, physician organizations and digital health companies. Ms. Metnick advises on healthcare regulatory and transactional matters with a focus on health information privacy and security. She is the founder and leader of Sheppard Mullin Healthy AI, which is an initiative focused on legal issues relates to the use of AI in healthcare. Ms. Metnick counsels healthcare clients on issues relating to AI, including governance, contractual matters, and data related issues. She advises clients on a range of privacy and security laws, including HIPAA and other federal and state privacy laws. Ms. Metnick also counsels businesses in data breach investigations and compliance with federal and state breach notification laws. She is a Certified Information Privacy Professional/United States (CIPP/ US) and a Certified Information Privacy Professional/Europe (CIPP/E).

Mr. Sutton takes on the most cutting edge and disruptive areas of practice, blending healthcare, technology, and legal compliance into his daily workload. In particular, he focuses on HIPAA and privacy related regulations and their interplay with technological developments both inside and outside of the healthcare and consumer spaces. Similarly, Mr. Sutton well versed in negotiations centered on data usage and derivative ownership rights. He supports clients as they navigate a complex web of emerging regulations in the digital healthcare space, tackling artificial intelligence, webtracking, information blocking, offshoring, de-identification, and other next-gen workstreams. He has managed government investigations, worked to resolve active breach incidents, and advised clients regarding a range of privacy and technology oriented matters. Mr. Sutton also supports clients in developing compliant and innovative approaches to navigating HIPAA and other privacy laws to ensure client objectives are achieved in alignment with all legal and regulatory requirements.