AGENDA: DAY IV
THURSDAY, MARCH 25, 2021
DAY IV MORNING MINI SUMMITS
MINI SUMMITS ROUND V: 10:00 am – 11:00 am EST
Mini Summit 17: How to Diagnose and Manage Cybersecurity Risks in Healthcare
10:00 am EST
Introductions and Panel Discussion

Barry Hofecker
Security Strategist and CISO, GreyCastle Security, Rochester, NY
Security Strategist and CISO, GreyCastle Security, Rochester, NY

Brian Murphy, MBA, CISA, CRISC
Security Specialist, GreyCastle Security, Rochester, NY
Security Specialist, GreyCastle Security, Rochester, NY
Mini-Summit 18: Changes to the Stark Anti-Kickback Regulations that Permit Healthcare Organizations to Donate Cybersecurity and Information Security Hardware and 3rd Party Services to Smaller Healthcare Providers
10:00 am EST
Introductions and Panel Discussion

David Holtzman, JD, CIPP
Principal, HITprivacy, LLC, Former Senior Adviser for HIT and the HIPAA Security Rule, Office for Civil Rights, US Department of Health and Human Services Austin, TX (Co-moderator)
Principal, HITprivacy, LLC, Former Senior Adviser for HIT and the HIPAA Security Rule, Office for Civil Rights, US Department of Health and Human Services Austin, TX (Co-moderator)

Thora A. Johnson, JD
Partner and Chair of Healthcare Practice, Venable, LLP, Baltimore, MD (Co-moderator)
Partner and Chair of Healthcare Practice, Venable, LLP, Baltimore, MD (Co-moderator)
Mini-Summit 19: HIPAA Right to Access Initiative & Defending Against Privacy Class Actions
Part I: HIPAA Right to Access Initiative
10:00 am EST
Introductions and Panel Discussion

Lyra Correa, JD, MPH
Attorney, Davis Wright Tremaine LLP, Former Contract Specialist, Centers for Medicare & Medicaid Services, Former Health Information Privacy Extern, Office for Civil Rights, US Department of Health and Human Services, Washington, DC
Attorney, Davis Wright Tremaine LLP, Former Contract Specialist, Centers for Medicare & Medicaid Services, Former Health Information Privacy Extern, Office for Civil Rights, US Department of Health and Human Services, Washington, DC

Rebecca L. Williams, RN, JD
Partner and Chair, Health Information Practice, Davis Wright Tremaine LLP, Seattle, WA
Partner and Chair, Health Information Practice, Davis Wright Tremaine LLP, Seattle, WA
Part II: Defending Against Privacy Class Actions
10:30 am EST
Introduction and Discussion

Michael Abraham, JD, MCP
Shareholder, Barkto Zankel Bunzel & Miller, San Francisco, CA
Shareholder, Barkto Zankel Bunzel & Miller, San Francisco, CA
11:00 am EST
Transition Break/Visit Exhibit Hall
MINI SUMMITS ROUND VI 11:15 am – 12:15 pm EST
Mini-Summit 20: Subjects in Clinical Trials and Data Privacy from the
Site (Covered Entity) to the Sponsor (Manufacturer)
Part I: Frontiers in Health Data Privacy: HIPAA, State Laws, and Other Privacy considerations for Health Research
11:15 am EST

Rachele Hendricks-Sturrup, DHSc, MSc, MA
Health Policy Counsel, The Future of Privacy Forum Research Fellow, Department of Population Medicine, Harvard Pilgrim Health Care Institute, Instructor, Medical Ethics & Health Policy, University of Pennsylvania School of Medicine, Washington, DC
Health Policy Counsel, The Future of Privacy Forum Research Fellow, Department of Population Medicine, Harvard Pilgrim Health Care Institute, Instructor, Medical Ethics & Health Policy, University of Pennsylvania School of Medicine, Washington, DC
Part II: Subjects in Clinical Trials and Data Privacy from the Site (Covered Entity) to the Sponsor (Manufacturer)
11:45 am EST
Introductions and Panel Discussion

Peggy L. Beat, JD
Partner and Member, Data Privacy & Cybersecurity Practice, Lewis Brisbois, Adjunct Professor, Cleveland Marshall College of Law, Former Attorney and Senior Director, Corporate Compliance, Cleveland Clinic, Cleveland, OH
Partner and Member, Data Privacy & Cybersecurity Practice, Lewis Brisbois, Adjunct Professor, Cleveland Marshall College of Law, Former Attorney and Senior Director, Corporate Compliance, Cleveland Clinic, Cleveland, OH

Leah Guidry, MA, JD
Managing Director and Lead, Healthcare Compliance and Research Compliance Team, Huron Consulting, Portland, OR
Managing Director and Lead, Healthcare Compliance and Research Compliance Team, Huron Consulting, Portland, OR
Mini-Summit 21: Business Associate Challenges
11:15 am EST
Introductions and Panel Discussion

Ben Cutler
President and Chief Executive Officer, Hush Communications Canada, Inc., Vancouver, BC, Canada
President and Chief Executive Officer, Hush Communications Canada, Inc., Vancouver, BC, Canada

Kean Quinton, MA
Compliance & Privacy Officer, Salisbury Management, LLC, Mountville, PA
Compliance & Privacy Officer, Salisbury Management, LLC, Mountville, PA

Robert J. Solomon, MD
Adult, Child and Adolescent Psychiatrist, Consulting Psychiatrist, Scripps Center for Integrative Medicine, Del Mar, CA
Adult, Child and Adolescent Psychiatrist, Consulting Psychiatrist, Scripps Center for Integrative Medicine, Del Mar, CA

Paul R. Hales, JD
Founder and Partner, Hales Law Group, Principal Consultant, ET&C Group LLC, St. Louis, MO (Moderator)
Founder and Partner, Hales Law Group, Principal Consultant, ET&C Group LLC, St. Louis, MO (Moderator)
Mini-Summit 22: HIPAA and Value-Based Care Initiatives & Lessons Learned from the Blackbaud Ransomware Attack
Part I: HIPAA and Compliance in the World of Value-Based Care Initiatives
11:15 am EST
Introduction and Discussion

Gerald Rupp, MS, PhD (Invited)
Chief Innovation Officer, Fusion5 Healthcare Solutions, Former Director of Research & Payment Innovation, Signature Medical Group, Former Vice President for Research, Executive Director, Institute for Science and Health, Saint Charles, MO
Chief Innovation Officer, Fusion5 Healthcare Solutions, Former Director of Research & Payment Innovation, Signature Medical Group, Former Vice President for Research, Executive Director, Institute for Science and Health, Saint Charles, MO
Part II: Lessons Learned from the Blackbaud Ransomware Attack, Focusing on Fundraising Activities and Institutionally Related Foundations
11:45 am EST
Introduction and Discussion

Dayna Nicholson, JD, MPH
Attorney, Davis Wright Tremaine, Los Angeles, CA
Attorney, Davis Wright Tremaine, Los Angeles, CA
12:15 pm EST
Luncheon Break/Visit Exhibit Hall
DAY IV CLOSING PLENARY SESSION: THE LATEST ON HIPAA ADMINISTRATIVE SIMPLIFICATION INITIATIVES
1:00 pm EST
Co-Chair Welcome and Overview

Robert M. Tennant, MA
Vice President, Federal Affairs, Workgroup for Electronic Data Interchange (WEDI); Former Director, HIT Policy, Medical Group Management Association; Washington, DC (Co-chair)
Vice President, Federal Affairs, Workgroup for Electronic Data Interchange (WEDI); Former Director, HIT Policy, Medical Group Management Association; Washington, DC (Co-chair)
1:15 pm EST
The Future of HIPAA Transactions: ONC and NCVHS Perspectives

Alexandra (Alix) Goss
Vice President and Senior Consultant, Imprado, Former Co-Chair, Standards Subcommittee, National Committee on Vital and Health Statistics, Former Executive Director, PA eHealth Partnership Authority, Harrisburg, PA
Vice President and Senior Consultant, Imprado, Former Co-Chair, Standards Subcommittee, National Committee on Vital and Health Statistics, Former Executive Director, PA eHealth Partnership Authority, Harrisburg, PA
1:45 pm EST
HIPAA Transactions: An Update on Operating Rules

Erin Richter Weber, MS
Director, CAQH CORE, Washington, DC
Director, CAQH CORE, Washington, DC
2:15 pm EST
The Future of HIPAA Transactions: The Health Plan Perspective

Gail Kocher, MPA
Director, National Standards, Blue Cross Blue Shield Association, Chicago, IL
Director, National Standards, Blue Cross Blue Shield Association, Chicago, IL
2:45 pm EST
The Future of HIPAA Transactions: The Hospital Perspective

Terrence Cunningham, JD
Director, Administrative Simplification Policy, American Hospital Association, Chicago, IL
Director, Administrative Simplification Policy, American Hospital Association, Chicago, IL
3:15 pm EST
Break/Visit Exhibit Hall
3:30 pm EST
The Future of HIPAA Transactions: The Physician Perspective

Heather McComas, PharmD
Director, Administrative Simplification Initiatives, American Medical Association, Former Professional Affairs Manager, National Association of Boards of Pharmacy (NABP), Chicago, IL
Director, Administrative Simplification Initiatives, American Medical Association, Former Professional Affairs Manager, National Association of Boards of Pharmacy (NABP), Chicago, IL
4:00 pm EST
HIPAA Transactions: Leveraging FHIR Standards to Achieve Automation

John Kelly, MHA
Principal Business Advisor, Edifecs, Board Member, Massachusetts Health Data Consortium, and Workgroup for Electronic Data Interchange (WEDI), Suffolk, MA
Principal Business Advisor, Edifecs, Board Member, Massachusetts Health Data Consortium, and Workgroup for Electronic Data Interchange (WEDI), Suffolk, MA
4:30 pm EST
HIPAA Transactions Faculty Q&A

Robert M. Tennant, MA
Vice President, Federal Affairs, Workgroup for Electronic Data Interchange (WEDI); Former Director, HIT Policy, Medical Group Management Association; Washington, DC (Co-chair/Moderator)
Vice President, Federal Affairs, Workgroup for Electronic Data Interchange (WEDI); Former Director, HIT Policy, Medical Group Management Association; Washington, DC (Co-chair/Moderator)