Privacy and Data Security

Winston & Strawn has developed an industry-wide practice in the health care field that encompasses virtually all aspects of health care law and integrates several different practice areas, including legislative, antitrust, litigation, corporate and financial, labor and employment, and employee benefits. The health care practice at Winston & Strawn is a nationally recognized leader and is ranked by Legal 500. An important part of this practice involves advising our clients in their compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other federal and state privacy laws.

Our clients include not only health care companies, but financial institutions, manufacturers, consulting firms, and municipal transportation authorities.

Examples of our health care privacy and security counseling and legal services include:

• Formulating a business model for "e-Health" companies
• Amending group health plan documents to comply with the law and preparing related employee communications, privacy procedures, and forms
• Training employees who work on group health plans regarding the requirements of the law
• Negotiating privacy provisions in clients' contracts with third-party administrators
• Helping clients determine the extent to which they are subject to HIPAA
• Drafting and implementing HIPAA policies and procedures for covered entities, business associates, and employers
• Creating compliance checklists to assist clients in executing an action plan for HIPAA compliance