Resource Library

This sample form contains a checklist for process a reasonable accommodation request.

In recent years, the compliance landscape for health industry companies has become more
complex, in part because of increasingly aggressive enforcement of privacy breaches and false claims by regulators. At the same time, unprecedented pushes for transparency and disclosure by both the government and the public continue to gain traction. This Practice Profile highlights elements presented by four healthcare organizations as crucial for responding to these trends and nurturing successful compliance programs. Organizational leaders featured here explain department leading practices designed to bolster cultures of compliance while better managing risk and encouraging innovation. They also offer their best practices in areas that can inform your own organization’s approach to compliance, its pursuit of an excellence culture and its effective reliance on outside counsel in responding to
government inquiries.

This protocol was issued to establish a process for health care providers to voluntarily identify, disclose, and resolve instances of potential fraud involving the Federal health care programs (as defined in section 1128B(f) of the Social Security Act (the Act), 42 U.S.C. 1320a–7b(f)).

As a result of the Health Information Technology for Economic and Clinical Health Act (HITECH), many businesses which weren’t subject to the Health Insurance Portability and Accountability Act (HIPAA) are suddenly struggling to understand their requirements and responsibilities under HIPAA. For example, the session will cover requirements and responsibilities related to negotiating contracts, accepting liability, providing indemnity and complying with federal requirements. This session will also discuss Business Associate Agreements: who is subject, what a subject entity is required to do (and what they’re not required to do), and what that means for their business –– especially if the business isn’t actually in the healthcare field. This includes an understanding of what should and shouldn’t be in the agreement; what may seem to be boilerplate should be carefully examined. A basic understanding of HIPAA requirements will be helpful for this session.

This sample form has specific application for parties entering a health services agreement. For instance, it considers the treatment of protected health information under the HIPAA Privacy Rule.

The purpose of this ACC guide (InfoPAK) is to provide an overview of opportunities available as a result of Big Data — the ability to collect, process, and interpret massive amounts of information — in healthcare, and the U.S. regulatory regime that is in part driving such industry change. It provides an overview of the key US federal and state laws pertaining to the collection and secondary use of health data, and suggests strategies and best practices for addressing health privacy and data ownership concerns.

This guide presents an overview of key legal and regulatory issues in the medical device business across a range of jurisdictions.

A detailed due diligence checklist form licensed from the American Health Lawyers Association, adapted, revised and fully annotated by Ropes & Gray, LLC with assistance from Bloomberg Law editorial staff. The checklist included is a sample for a simple, small-dollar transaction in the United States involving a general healthcare provider or supplier.

This Wisdom of the Crowd (ACC member discussion) is compiled from questions and responses posted by the IT, Privacy and eCommerce Network on their Forum. It addresses the use of indemnification provisions in Business Association Agreements (BAAs) in the United States.

“Risk management” has just been added to your job description. Surprised? In today’s corporate environment, understanding how to identify, analyze and mitigate risk is essential for any in-house counsel. Learn the basics and check out the example using compliance with the US Health Insurance Portability and Accountability Act ("HIPAA").