James Schuster, Esq - Iapp Cipp (Us And Canada) Email & Phone Number

Los Angeles, California, Us

* Direct privacy, data protection, security, and compliance initiatives for multiple clinical laboratory locations, both domestic and foreign.* Advocate and support Privacy by Design principles to be embedded in existing and new technologies and software of Flow Health. * Critically analyze and assess company clinical laboratory testing activities to advise and counsel on hybrid entity, affiliated covered entity, and multiple covered function (health care provider and health care clearinghouse) matters.* Handle data incidents and breaches, including whether an event is an incident or an incident that is also a breach; Determine applicable data breach notification laws and timely comply with them and their requirements; Use spreadsheet and other technologies to categorize what actions need to be taken insofar as reporting; communications with the press and media, as dictated by applicable law; Analyze, assess, determine and calendar notification timeframes; Journal and archive all events, incidents, and breaches. * Carry out profile, impact, and gap analyses for company under CCPA, as revised by CPRA, HIPAA Privacy and Security Rules, TCPA, CAN-SPAM, CPA, CDPA, VCDPA, UCPA, PIPEDA, and GDPR; Provide legal counsel and advise on Stark, anti-kickback, and 18 U.S.C. 220; Direct SOC2 activities.* Draft and negotiate business associate agreements, complex corporate agreements and relationships; Simplify, streamline, and improve Flow Health contracting processes as a clinical laboratory, reference laboratory, software and technology white branding presence in precision medical and interoperability. * Developed HHS OIG Compliance Program for clinical laboratory operations.

Columbus, Oh, Us

Formed and headed up a multi-disciplinary privacy compliance team, and putting into action a comprehensive work plan for: Delivered timely expert privacy and data protection advice and counsel to business units; Created and implemented online and real time HIPAA, TCPA, FCRA, FTC, CCPA/CPRA, VCDPA, CTDPA, UCPA, NRS ch. 603A/SB 220; Colorado Privacy Act, and other State privacy and data protection profiling, decision support, and training and education tools and modules; * Implemented communication channels and methods for business units to get real-time privacy guidance and instruction; * Oversaw data incidents and breaches, including whether an event is an incident or an incident that is also a breach; Determine applicable data breach notification laws and timely comply with them and their requirements; Use spreadsheet and other technologies to categorize what actions need to be taken insofar as reporting; communications with the press and media, as dictated by applicable law; Analyze, assess, determine and calendar notification timeframes; Journal and archive all events, incidents, and breaches. * Invoked Privacy by Design principles into and as part of and technology-based arctic for specialty pharmaceutical systems, technologies, and work processes. * Drafting and negotiating data protection and business associate agreements; Serving as advisor to Legal on privacy matters; Developing and implementing software and technologies for decision support and intelligent custom legal and compliance document creation and forms completion; Carrying out quantitative and other auditing, monitoring, and assessments of company uses, disclosures, and other handling of personal information; Devising and carrying out data life cycle and data use impact assessments; and Serving as privacy expert on behalf of CoverMyMeds on its commitments to and investments in Ohio State University Law School data ethics initiatives.

Washington Dc, District Of Columbia, Us

Appointed by the U.S. Court of Appeals and District Courts to represent petitioners and defendants on constitutional habeas corpus death penalty matters and other appeals.

Gb

Medicare and Medicaid Managed Care Content Lead for PwC's RegRanger technology Initiative.

Richmond, Va, Us

Senior compliance officer to PBM, software and technology, and pharmacy entities on federal regulatory compliance and privacy matters, including Medicare Advantage Prescription Drug Plans..

Akron, Ohio, Us

* Legal counsel and advisor to firm clients on Stark, anti-kickback, fraud and abuse, HIPAA Privacy and Security, Medicare Advantage and Part D, Pharmacy and other matters; Handled and managed corporate formations, mergers, acquisitions, asset purchases, and contract and other transactional matters; Represented and served as outside general counsel to software/technology pursuits.* Handled data incidents and breaches, including but not limited to, assessing whether an event is an incident or an incident that is also a breach; Use spreadsheet and other technologies to categorize what actions need to be taken insofar as reporting;,communications with the press and media, as dictated by applicable law; Analyze, assess, determine and calendar notification timeframes; Journal and archive all events, incidents, and breaches.

Cleveland, Oh, Us

Adjunct Law Professor for HIPAA Privacy and Security Rule, HIPAA Breach Notification Rule; and FTC Health Breach Notification Rule; and State Privacy Laws.

Cleveland, Ohio, Us

Legal counsel and advisor to firm clients on Stark, anti-kickback, fraud and abuse, HIPAA Privacy and Security, Pharmacy and other matters; Handled and managed corporate formations, mergers, acquisitions, asset purchases, and contract and other transactional matters; Represented and served as outside general counsel to software/technology pursuits.

Privacy and security compliance counsel and advisor to physician practices, third-party medical billing companies, acute care settings, sub-acute care settings, medical transportation, business associates, professional sports franchises, municipalities, and other entities.* Handle data incidents and breaches, including but not limited to, assessing whether an event is an incident or an incident that is also a breach; Use spreadsheet and other technologies to categorize what actions need to be taken insofar as reporting; communications with the press and media, as dictated by applicable law; Analyze, assess, determine and calendar notification timeframes; Journal and archive all events, incidents, and breaches.

Jd, Health Law

Bs, Political Science

Journalism