HIPAA: A Practical Guide to the Privacy and Security of Health Data

June Sullivan is a health law attorney and the Senior Director of Compliance and Privacy at the University of Massachusetts Medical School (UMMS). She oversees all activities related to the development, implementation, maintenance of the Compliance and Privacy Program. She advises researchers; healthcare providers; employees and students on federal and state laws in a variety of areas including privacy; compliance; risk management; conflicts of interest; contracts; and procurements. Before coming to UMMS, she was Associate General Counsel at UnitedHealthcare. Prior to that, she was a partner at the law firm of Halloran & Sage in Hartford, Connecticut where she practiced health law for ten years. She has a health law certificate and law degree from Quinnipiac University. She also has a Master's Degree in Occupational Therapy and Bachelor's Degree in Medical Technology. She is Certified in Healthcare Privacy Compliance (CHPC) and Healthcare Compliance (CHC). She is the author of the first and second edition of HIPAA: A Practical Guide to the Privacy and Security of Health Data. Shannon B. Hartsfield is a health lawyer whose practice focuses on corporate compliance, particularly in the regulatory and data privacy areas. She is Board Certified in Health Law by the Florida Board of Legal Specialization and Education. She advises clients on state and federal matters, including healthcare compliance, internal investigations, HIPAA and data privacy, cyberliability and reducing risk, consumer protection relating to privacy, long-term care, fraud and abuse, licensure, EMTALA, electronic medical records and prescription drug distribution. Ms. Hartsfield's clients include health plans and insurers, medical technology companies, assisted living facilities, continuing care retirement communities, nursing homes, hospitals and large clinics, pharmaceutical manufacturers and distributors, pharmacies, tissue banks, medical and benefit management companies, religious institutions and data analytics companies, among others. Ms. Hartsfield is a past Chair of the ABA Health Law Section's eHealth, Privacy & Security Interest Group.