The practice was formed by nationally-known and widely-respected information technology attorney John R. Christiansen after many years in large, national law and consulting firm practice, to provide service more directly, flexibly and creatively.
One of the recurring questions I get from (more sophisticated) clients about security risk mitigation and safeguards is, what’s the standard for acceptable risk? This is, of course, the standard for Security Rule compliance overall, and for each Security Rule safeguard as well. “Acceptable risk” is ideally supposed to be whatever an organization decides, after […]
I just did a piece for the Individual Association of Privacy Professionals (“IAPP”) entitled Seeking a Difficult Balance: The Limits of Privacy in the Emerging Healthcare IT Ecology, which you can read in the November edition of The Privacy Advisor. It’s about the difficulties of striking a balance between privacy/confidentiality and other important values, using […]
PLEASE SEE THIS POST FOR MORE CURRENT INFORMATION: Do the HITECH Rules Really Make All Healthcare ASPS and Cloud Services Providers Business Associates? I’ve been thinking more deeply about healthcare IT, PHI and the cloud. I now have clients who are are building it in to their processes, and I’ve become convinced me that it’s really the only way […]