HIPAA regulation Summit
HIPAA regulation Summit
HIPAA regulation Summit
HIPAA regulation Summit
HIPAA regulation Summit
HIPAA regulation Summit



Overview | Agenda | Certifications | CE Credits | Promotional Opportunities | Grantors & Exhibitors
Admin | Speaking Proposals | HIPAA Award Winners | Webcast Login | Past Summits | Contact Us | Home




Go to Agenda:
Day 2 | Day 3

TWENTY-FOURTH NATIONAL HIPAA SUMMIT
AGENDA: PROFESSIONAL CERTIFICATION PRECONFERENCE

Monday, March 21, 2016
(Participation optional; Separate registration required.)

7:00 a.m. Registration Open

PROFESSIONAL CERTIFICATION PRECONFERENCE: HIPAA ACADEMY (CHP, CSCS™ AND CHA™)
Professional Certification Training

8:00 a.m.

Introduction and Overview

Lorna L. Waggoner
Director, HIPAA Academy, Waukee, IA

    Speaker Bio

    Lorna has worked for ecfirst the HIPAA Academy since 2000, and Director of Business Development for the past 12 years. Her responsibilities include working with hospitals and Business Associates doing business with healthcare, throughout the United States in a consulting capacity to provide them with compliance services around HIPAA, ISO, FISMA and other regulations regarding Security Risk Analysis, Business Impact Analysis, Disaster Recovery Planning, Policy and Procedure development and Training. She is an instructor who teaches a two-day course on HIPAA rules and regulations, and has been a speaker at events including the National HIPAA Summit and other healthcare events.
Uday O. Ali Pabrai, MSEE, CISSP
Chief Executive Officer and Co-founder, ecfirst, (Home of HIPAA Academy), Irvine, CA

    Speaker Bio

    Ali Pabrai, MSEE, CISSP (ISSAP, ISSMP), Security+, a cyber security & compliance expert, is the CEO of ecfirst. A highly sought after professional, he has successfully delivered solutions to U.S. government agencies, IT firms, healthcare systems, legal and other organizations worldwide. Mr. Pabrai serves as an Interim CISO for a health system with 30+ locations in USA. Mr. Pabrai has led numerous engagements worldwide for ISO 27000, PCI DSS, NIST and HIPAA/HITECH security assessments. Mr. Pabrai has presented keynote and featured briefs on cyber security and compliance subjects at leading conferences globally, including the USA, Canada, India, UAE, Saudi Arabia, Philippines, Japan and other countries.

    Mr. Pabrai is a proud member of the InfraGard (FBI).
8:15 a.m. Introduction to HIPAA/HITECH Act
9:00 a.m. Introduction to HIPAA Privacy
9:45 a.m. Break
10:15 a.m. Advanced HIPAA Privacy Topics
11:00 a.m. Introduction to HIPAA Security
11:45 a.m. Faculty Q&A
12:00 p.m. Adjournment; Lunch on Your Own

AGENDA: DAY I
Monday, March 21, 2016

HIPAA SUMMIT DAY I OPENING PLENARY SESSION -- HIPAA PRIVACY
1:00 p.m.

Introduction and Overview

Adam Greene, JD, MPH
Partner, Davis Wright Tremaine; Former Senior Health Information Technology and Privacy Specialist, Office for Civil Rights, US Department of Health and Human Services, Washington, DC (Co chair)

    Speaker Bio

    Adam Greene is a partner in the Washington, D.C. office of Davis Wright Tremaine and co-chair of its Health Information Group. Adam primarily counsels health care providers, technology companies, and financial institutions on compliance with the HIPAA privacy, security, and breach notification rules. Previously, Adam was a regulator at the U.S. Department of Health and Human Services, where he played a fundamental role in administering and enforcing the HIPAA rules. At HHS, Adam was responsible for determining how HIPAA rules apply to new and emerging health information technologies and was instrumental in the development of the current HIPAA enforcement process.

    Adam is the Chair of the HIMSS Cloud Security Workgroup and is a frequent speaker and author on health information privacy and security issues.
1:15 p.m.

OCR Update

Jocelyn Samuels, Esq.
Director, Office for Civil Rights (OCR), US Department of Health and Human Services; Former Acting Assistant Attorney General for Civil Rights, United States Department of Justice, Washington, DC

    Speaker Bio

    Jocelyn Samuels is the Director of the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), where she leads enforcement of federal laws that help to ensure non-discrimination and equity in federally funded health and human services, and enforcement of the HIPAA Privacy, Security and Breach Notification Rules. Ms. Samuel previously served as the Acting Assistant Attorney General for Civil Rights at the U.S. Department of Justice (DOJ). Most immediately prior to her tenure with DOJ, Ms. Samuels was the Vice President for Education and Employment at the National Women's Law Center in Washington, D.C.
Deven McGraw, Esq.
Deputy Director, Health Information Privacy, Office for Civil Rights, Department of Health and Human Services; Former Partner, Manatt, Phelps & Phillips LLP; Director, Health Privacy Project, Center for Democracy & Technology; Former Chief Operating Office, National Partnership for Women & Families, Washington, DC

    Speaker Bio

    Deven McGraw joined the HHS Office for Civil Rights (OCR) as the Deputy Director for Health Information Privacy on June 29, 2015. Ms. McGraw spearheads OCR's policy, enforcement, and outreach efforts on the HIPAA Privacy, Security, and Breach Notification Rules; as well as lead OCR's work on Presidential and Departmental priorities on health privacy and security. Prior to joining OCR, she was a partner in the health care group and co-led the privacy and security practice at Manatt, Phelps & Phillips, LLP and previously served as the Director of the Health Privacy Project at the Center for Democracy & Technology.
2:30 p.m.

Privacy by Design

Jacki Monson, JD, CHC, CHPC
Chief Privacy Officer, Sutter Health; Former Privacy Officer, Mayo Clinic Health System, Sacramento, CA

    Speaker Bio

    Jacki Monson has been working in healthcare for 12 years. Jacki's focus in healthcare has been in compliance, privacy and information security for the last ten years. Currently, Jacki is the Chief Privacy and Information Security Officer for Sutter Health where she provides direction and oversight of the privacy and information security program for all sites. Prior to that, Jacki served as the Chief Privacy Officer for Mayo Clinic. Prior to Mayo, Jacki worked for a Pharmacy Benefit Management and Mail Order Pharmacy Company and an independent Children's Hospital in compliance, information security and privacy roles. Jacki has authored numerous articles on privacy and information security and is a frequent speaker on the subject matters.

    Jacki has a Juris Doctor from Hamline University Law School. She holds certifications in health care law, privacy and compliance. She has a BA from The College of Saint Scholastica in Psychology.
Morgan Vanderburg, JD
Compliance and Privacy Officer of Southwest Minnesota, Mayo Clinic Health System, Mankato, MN

    Speaker Bio

    Morgan Vanderburg, JD is a Compliance/Privacy Officer in Mayo Clinic's Integrity and Compliance Office. In Morgan's role, she is responsible for the implementation of Mayo Clinic's compliance program into its community-based medical practice. She advances the seven elements of an effective compliance program for topics such as privacy, EMTALA, fraud and abuse, and conflict of interest. She is also a member of Mayo Clinic's Institutional Review Board (IRB). Prior to her Compliance/Privacy Officer role, Morgan worked as a Senior Privacy Analyst at Mayo Clinic, where she led business associate initiatives, conducted privacy investigations, and consulted with internal operational colleagues about privacy requirements. Morgan has a Juris Doctor from Hamline University School of Law and graduated with healthcare law and compliance certificates from Hamline's Health Law Institute.
    Presentation Material (Acrobat)
3:15 p.m. Break

3:45 p.m.

The HIPAA Privacy Rule and Research: Tensions and Innovations

Tina Grande, MHS
Senior Vice President, Policy and Chair, Confidentiality Coalition, Healthcare Leadership Counsel, Washington, DC

    Speaker Bio

    Tina Grande is Senior Vice President for Policy for the Healthcare Leadership. Ms. Grande took the helm of HLC's Policy Department in 2007 where she oversees all policy-related matters pertaining to delivery systems, payment reform, health information technology, patient safety, and healthcare quality. She chairs the Confidentiality Coalition, the leading health privacy coalition bringing together all sectors of the healthcare industry to ensure that federal policymakers find the right balance between the protection of health information and the efficient and interoperable systems needed to provide high quality care.
Nancy L. Perkins, MPP, JD
Counsel, Arnold & Porter, Washington, DC

    Speaker Bio

    Nancy L. Perkins, counsel at Arnold & Porter LLP, advises clients on a wide range of data protection issues at the federal and state levels, as well as on cross-border data privacy and security matters. She has particular expertise with HIPAA and the HITECH Act and is the author of numerous articles on medical data privacy regulation, including, most recently: Revised HIPAA Privacy Rule: Implications For Research and Marketing, Update, Food & Drug Law Institute (May/June 2013); New HIPAA Regulations: What Liability Risks Loom Under the Expanded Business Associate and Breach Notification Provisions Bloomberg/BNA Health Law Reporter (Feb. 21, 2013).
    Presentation Material (Acrobat)
4:15 p.m.

Innovation Showcase of New HIPAA Compliance Products and Services

Fouad Khalil, CISA, ITIL
Director of Compliance, SSH Communications Security, Waltham, MA

    Speaker Bio

    Director of Compliance with extensive experience in the technology space with more than 25 years spanning disciplines in software development, IT support, program and project management and most recently IT Security and Compliance management. Key areas of focus include: Information Technology, Internal Controls over financial reporting, Sarbanes-Oxley, PCI DSS, and HIPAA/HITECH compliance. Experienced in security training and awareness as part of corporate governance and regulatory compliance. ISACA Member & CISA Certified.
    Presentation Material (Acrobat)
Joseph Kirkpatrick
Managing Partner, KirkpatrickPrice, Tampa, FL

    Speaker Bio

    Joseph, Managing Partner at KirkpatrickPrice, holds the CISSP, CISA, CGEIT, and CRISC certifications as a certified specialist in data security, IT governance, and regulatory compliance. He has delivered auditing and security assessment services for more than 15 years.
    Presentation Material (Acrobat)
Michael Parikh
Chief Executive Officer, Mobile Encrypted Data Exchange (M.E.D.X), Depew, NY

Presentation Material (Acrobat)
Angela Rose, MHA, RHIA, CHPS FAHIMA
Director, HIM Practice Excellence, AHIMA, Chicago, IL

Presentation Material (Acrobat)
Jon Stone, MPA, PMP, HCISPP, CRISC
VP, Product Innovation, Clearwater Compliance, Nashville, TN

    Speaker Bio

    Jon has a unique breadth of experience with a combined 25 years' experience in healthcare, working in the provider, payer and healthcare quality improvement fields. For the last 15 years Jon has provided strategic leadership for compliance and healthcare technology projects involving the most sensitive ePHI for companies such as CIGNA, Healthways and Ingenix. He is Clearwater's VP of Product Innovation, and helps provide HIPAA Security and Privacy SaaS (Software as a Service) for the healthcare industry.
    Presentation Material (Acrobat)
Adam Greene, JD, MPH
Partner, Davis Wright Tremaine; Former Senior Health Information Technology and Privacy Specialist, Office for Civil Rights, US Department of Health and Human Services, Washington, DC (Moderator)

    Speaker Bio

    Adam Greene is a partner in the Washington, D.C. office of Davis Wright Tremaine and co-chair of its Health Information Group. Adam primarily counsels health care providers, technology companies, and financial institutions on compliance with the HIPAA privacy, security, and breach notification rules. Previously, Adam was a regulator at the U.S. Department of Health and Human Services, where he played a fundamental role in administering and enforcing the HIPAA rules. At HHS, Adam was responsible for determining how HIPAA rules apply to new and emerging health information technologies and was instrumental in the development of the current HIPAA enforcement process.

    Adam is the Chair of the HIMSS Cloud Security Workgroup and is a frequent speaker and author on health information privacy and security issues.
4:45 p.m.

Healthcare Chief Privacy Officer Best Practices Roundtable

Andrea Leeb, Esq.
Chief Privacy Officer, Cal INDEX; Former Chief Privacy Officer, Public and Senior Markets Group, United Health Group, Los Angeles, CA

    Speaker Bio

    Andrea Leeb is the Chief Privacy Office for Cal INDEX (California Integrated Health Data Exchange). Cal INDEX is non-profit health information exchange formed in August 2014 by two independent private insurers to address the major unmet medical need of a statewide health data exchange. Andrea has extensive experience working with issues related to the privacy and security of healthcare information. Prior to joining Cal INDEX, she served as assistant managing counsel for L.A. Care Health Plan in Los Angeles, the nation's largest publicly operated health plan. Prior to that, she was senior director, global privacy risk and quality for McKesson Corporation, where she worked on the development of an enterprise privacy program.
Molly McCoy, Esq.
Privacy Counsel/Chief Privacy Officer, Blue Shield of California, San Francisco, CA

    Speaker Bio

    Molly McCoy, Esq/CIPP US, is Chief Privacy Officer and Privacy Counsel at Blue Shield of California. Prior to joining Blue Shield, Molly was Associate General Counsel for Privacy and HIPAA Security at Anthem, Inc. Molly has worked as a lawyer in the Health Care and Health Care Compliance areas since 1997. Molly's practice areas have focused primarily on federal and state privacy and security law, including the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). Most recently, Molly served as lead in-house privacy and HIPAA security counsel for Anthem's cyber attack. Molly is also a contributing editor to "Information Security and Privacy: A Guide to Federal and State Law and Compliance," (West 2006-2015).
Jacki Monson, JD, CHC, CHPC
Chief Privacy Officer, Sutter Health; Former Chief Privacy Officer, Mayo Clinic, Sacramento, CA

    Speaker Bio

    Jacki Monson has been working in healthcare for 12 years. Jacki's focus in healthcare has been in compliance, privacy and information security for the last ten years. Currently, Jacki is the Chief Privacy and Information Security Officer for Sutter Health where she provides direction and oversight of the privacy and information security program for all sites. Prior to that, Jacki served as the Chief Privacy Officer for Mayo Clinic. Prior to Mayo, Jacki worked for a Pharmacy Benefit Management and Mail Order Pharmacy Company and an independent Children's Hospital in compliance, information security and privacy roles. Jacki has authored numerous articles on privacy and information security and is a frequent speaker on the subject matters.

    Jacki has a Juris Doctor from Hamline University Law School. She holds certifications in health care law, privacy and compliance. She has a BA from The College of Saint Scholastica in Psychology.
Morgan Vanderburg, JD
Compliance and Privacy Officer of Southwest Minnesota, Mayo Clinic Health System, Mankato, MN

    Speaker Bio

    Morgan Vanderburg, JD is a Compliance/Privacy Officer in Mayo Clinic's Integrity and Compliance Office. In Morgan's role, she is responsible for the implementation of Mayo Clinic's compliance program into its community-based medical practice. She advances the seven elements of an effective compliance program for topics such as privacy, EMTALA, fraud and abuse, and conflict of interest. She is also a member of Mayo Clinic's Institutional Review Board (IRB). Prior to her Compliance/Privacy Officer role, Morgan worked as a Senior Privacy Analyst at Mayo Clinic, where she led business associate initiatives, conducted privacy investigations, and consulted with internal operational colleagues about privacy requirements. Morgan has a Juris Doctor from Hamline University School of Law and graduated with healthcare law and compliance certificates from Hamline's Health Law Institute.
Anna C. Watterson, JD, CIPP/US, CIPM
Associate, Davis Wright Tremaine; Former Policy Analyst, Office for Civil Rights, US Department of Health and Human Services, Washington, DC (Moderator)

    Speaker Bio

    Anna Watterson is an associate at Davis Wright Tremaine where she regularly advises clients on state and federal privacy, security, and data breach matters, with a focus on health information privacy laws, including HIPAA and HITECH. Prior to joining DWT, Anna was a policy analyst with the HHS, Office for Civil Rights, where she assisted in the rulemaking process, helped develop the audit program and served as team lead for the Breach Notification Rule. In 2015, Anna co-taught a course at the Washington College of Law: Healthcare Compliance: Privacy and Data Protection.
5:45 p.m. Adjournment and Networking Reception

Go to Agenda:
Day 2 | Day 3





Overview | Agenda | Certifications | CE Credits | Promotional Opportunities | Grantors & Exhibitors
Admin | Speaking Proposals | HIPAA Award Winners | Webcast Login | Past Summits | Contact Us | Home




© Health Care Conference Administrators
Contact Webmaster