Ed helps clients assess and develop innovative technologies (including AI/ML-enabled products) to comply with applicable laws while achieving their business objectives. He is a Certified Information Privacy Professional (CIPP/US) and advises clients on a broad range of information privacy and cybersecurity laws, including HIPAA, HITECH Act, 42 CFR Part 2, CCPA/CPRA and other state consumer privacy laws, GDPR, NYDFS Cybersecurity Regulation, and other privacy and cybersecurity regimes.

Ed manages complex, high-profile ransomware attacks and other data breaches, guiding clients through all aspects of incident response and remediation. He is one of the nation’s leading lawyers in responding to HIPAA compliance investigations by the US Department of Health and Human Services Office for Civil Rights and state attorneys general. Ed has extensive experience negotiating favorable settlements on behalf of clients when these investigations result in allegations of noncompliance.

Ed has partnered with clients from across the technology and healthcare spectrum in their response efforts related to the COVID-19 pandemic, including advising on the use of technologies to facilitate communications among providers and patients, and helping organizations address the related privacy, cybersecurity, telehealth, medical device and other legal considerations.

Show Less

• Represented clients in response to numerous HHS-OCR HIPAA compliance investigations, including successfully resolving dozens without any adverse findings and negotiating multiple favorable settlements for clients
• Represented a publicly traded technology company in investigating and responding to an international cyberattack that affected its services and operations
• Advised a large electronic health record (EHR) company on various data use and disclosure considerations related to its development of a personal health record for patients of its healthcare provider customers
• Advised a national retail chain on structural and healthcare compliance considerations related to its establishment of in-store clinics
• Served as privacy counsel to publicly traded healthcare services company in its acquisition of a medication therapy management company
• Represented a hospital system in acquiring assets of a large physician cardiology group practice and employing physicians
• Represented health systems in drafting and negotiating a service line co-management agreements for specialty service lines

Show Less