• Develop, maintain and implement policies and processes to promote effective privacy practices that minimize risk to the organization and ensure compliance with applicable laws pertaining to protected health information (PHI), paper and/or electronic, across all media types.• Collaborate with members of the organization, including but not limited to senior management, security, and other corporate compliance officers to establish governance for the privacy program.• Work closely with the information security officer to promote alignment between security and privacy compliance programs including an ongoing process to audit, monitor, investigate and manage accesses and disclosures of PHI.• Perform yearly privacy risk assessment and mitigate/remediate the identified organizational risks.• Conduct ongoing privacy monitoring activities for users with access to PHI in order to ensure appropriate access, use, and disclosure of PHI.• Collaborate with members of the organization to create, maintain, and update privacy forms (including but not limited to privacy and confidentiality consents, authorization forms, releases for information, and notice of privacy practices) to reflect current organization and legal practices and requirements.• Develop and provide initial and ongoing privacy training to the workforce.• Participate in developing and implementing business associate agreements to ensure all privacy needs, requirements, and responsibilities are addressed.• Administer process for investigating and acting on privacy and security complaints, including performing required breach risk assessment, documentation, and mitigation, and when necessary, managing all required breach determination and notification processes under HIPAA and applicable State breach rules and requirements.• Cooperate with federal and state regulators in compliance investigations and reviews.

• Advise healthcare providers, including healthcare facilities on regulatory and corporate compliance, fraud and abuse (Anti-kickback Law, Stark II, etc.), and state regulatory matters including certificate of need and licensing.• Defend healthcare facilities and individual medical professionals regarding licensing and certification issues.• Provide training and counseling to clients on compliance with healthcare and employment requirements in the workplace.• Defend healthcare facilities regarding insurance reimbursement and overpayment matters.

• Conducted legal research and drafted opinions and orders for civil, criminal, and appellate cases.• Briefed, researched, and prepared weekly civil docket for civil motion hour.• Prepared and briefed civil and criminal motions, hearings, and pretrial conferences.• Drafted jury instructions for civil and criminal trials.