Legal Services for Suppliers of Goods and Services to Covered Entities

• Analysis of the legal standard of care that covered entities are likely to, or must, adopt in selecting security standards that apply to vendors of all manner of products and services
  • Security performance of computer and communications systems
    • Integration with covered entity's legacy and proposed new systems
    • Use of encryption (Public Key Infrastructure and other systems)
  • Outsource service-provider's adherence to covered entity client's new HIPAA-mandated security practices for personnel and business processes
  • Analysis of HIPAA-related risk-sharing and risk-transfer issues with covered entity clients
• Development of HIPAA-related vendor business-process, physical, and personnel security policies to satisfy covered entity clients
• Legal consultation with security consultants and legal review of security consultants' reports and recommendations in light of HIPAA-required legal duties and practices
• Analysis of litigation risk in furnishing goods and services that may be affected, or controlled, by HIPAA
• Insurance for HIPAA risks
• Assistance in negotiating business associate (chain-of-trust and business partner agreements)
• HIPAA-related litigation

return to eHealth/HIPAA Legal Services main page