Carolyn V. Metnick focuses her practice on health information privacy and security. She helps covered entities and business associates develop effective policies, procedures and workforce training to comply with HIPAA and the HITECH Act. She also counsels businesses in data breach investigations and compliance with other federal and state breach notification laws, and assists businesses in responding to cyberattacks and other security breaches.
Carolyn also advises healthcare providers on transactions and business issues. She guides clients through joint ventures, mergers and acquisitions, and counsels on governance matters as well as regulatory issues. She advises on compliance with the federal fraud and abuse laws, including the Stark Law and the Anti-Kickback Statute. Carolyn’s background as a former litigator helps inform her transactional work.
Carolyn serves as an adjunct instructor at the University of Illinois–Chicago, School of Public Health, Health Policy and Administration Division. She is also a Certified Information Privacy Professional/United States (CIPP/US) and a Certified Information Privacy Professional/Europe (CIPP/E).
American Arbitration Association Panel of Arbitrators, panelist
American Heart Association Go Red for Women Campaign, executive leadership team member, 2018 to present
American Health Lawyers Association, Transactions Program Planning Committee, 2018 to present; Business Law & Governance Practice Group, vice chair, 2012 to 2018; Governance Affinity Group, co-chair, 2009 to 2012
Illinois Association of Healthcare Attorneys, president, 2019; board member, 2014 to present
Illinois State Bar Association, Health Law Section Council, member, 2006 to present; chair, 2013 to 2014; vice chair, 2012 to 2013; associate editor of Health Care Lawyer, 2007 to 2008; member of Standing Committee on Professional Conduct, 2006 to 2008
International Association of Privacy Professionals, member, 2017
Ballet Chicago, board member, secretary, 2012 to 2015
The Junior League of Chicago, member, 2004 to present; new member chair-elect, 2009 to 2010; corporate relations chair, 2007 to 2009
ILHIE Legal Task Force Patient Consent Subcommittee, 2011 to 2012
University of Chicago Alumni Club of Chicago, board member, 2008 to 2011
Chicago Bar Association, YLS Health & Hospital Law Committee, co-chair, 2006 to 2009
Chicago Volunteer Legal Services, child representative/guardian ad litem, 2004 to 2007
St. Vincent de Paul Center, associate board president, 2005 to 2007; associate board member, 2004 to 2007
Do not send any information or documents that you want to have treated as secret or confidential. Providing information to McDermott via email links on this website or other introductory email communications will not create an attorney-client relationship; will not preclude McDermott from representing any other person or firm in any matter; and will not obligate McDermott to keep confidential the information you provide. McDermott cannot enter into an attorney-client relationship with you until McDermott has determined that doing so will not create a conflict of interest and until you and McDermott have entered into a written agreement or engagement letter that sets forth the terms of our relationship.