Health Care Regulations

Overview

State and Federal health care laws continue to evolve, not only to effectuate change, but also to respond to change in our health care delivery system. Our health care attorneys are continuously tracking state and federal legislation to ensure that our clients are compliant. They also maintain strong working relationships with federal and state agencies that oversee the operations of health care providers to assure responsiveness. Because the health care regulatory scheme is highly complex, our health care attorneys attend on-going educational courses in order to obtain “in-depth” knowledge of the laws and to update our clients regarding the most current legal developments.

Our regulatory experience includes:

  • Collaborating with State and Federal administrative agencies on a variety of regulatory matters including licensure, Certificate of Need requirements, expansion and renovation requirements for various types of health care facilities including hospitals, continuing care retirement communities, out-patient centers and long term care facilities.
  • Advising health care clients on HIPAA privacy issues related to patient health information.
  • Assisting our clients with Medicare and Medicaid compliance matters which include structuring relationships with vendors, third party payers, billing companies and professional service providers.
  • Assisting clients with policy development that meets the broad spectrum of regulatory requirements including tax, labor and employment, quality of care, organizational structure and operations, and professional peer review.

Name
Title
Contact
Rose M. Matricciani
Partner
Emailrmatricciani@whitefordlaw.com
410.347.9476
Herman B. Rosenthal
Partner
Emailhrosenthal@whitefordlaw.com
410.347.9488

Client Alert: HIPAA Happenings: U.S. Department of Health and Human Services Proposes Updated HIPAA Cybersecurity Rules

On January 6, 2025, the U.S. Department of Health and Human Services (“DHHS”) Office of Civil Rights (“OCR”) published a proposed rule entitled, “HIPAA Security Rule to Strengthen the Cybersecurity of Electronic Health Regulation” (the “Proposed Rule”). The Proposed Rule aims to address extensive developments in the management, transmission, and protection of electronic protected health information (“ePHI”) that have arisen since the latest revisions to applicable HIPAA regulations in 2013. Such developments include the expansion of threats to the confidentiality, accessibility, and integrity of ePHI, including evolutions in malware, ransomware, social engineering scams, and other threats, as well as the increase in mobile devices that access and store ePHI, expanded use of remote/mobile workstations, and greater reliance on electronic and cloud-based data systems.