Sunday, November 5, 2017

Physicians and Hospitals Law Institute Explores Health Care Law Issues


A partner at Reed Smith in Pennsylvania, attorney Brad Rostolsky leads the firm’s HIPAA and Health Privacy & Security Practice as a member of its Life Sciences Health Industry Group. Brad Rostolsky has also servved as the co-chair of the Privacy and Security Compliance and Enforcement Affinity Group for the American Health Lawyers Association (AHLA). Upcoming educational programs offered by AHLA in the health sector include the Physicians and Hospitals Law Institute

The program explores legal challenges across health sectors, including those encountered by physicians, hospitals, health systems, and their counsels. It also delves into legal areas associated with health care delivery and covers topics ranging from compliance and fraud to transactions and fair market value. Information and discussion are delivered through a series of in-depth breakout sessions designed to meet the educational needs of AHLA members and provide continuing legal education credits. Participants also receive the opportunity to expand their contacts through two networking receptions sponsored by Horne LLP. 

Program materials for the next Institute, to be held February 5-7, 2018 in New Orleans, become available for online access one week prior to the program, and all participants receive a flash-drive copy on-site. Access to online materials is exclusive to registered participants, who receive an email containing a direct link to the website. 

Physicians and Hospitals Law Institute will take place February 5-7, 2018 at the Sheraton New Orleans in Louisiana.

Thursday, October 19, 2017

Mitigating Cyber Security Risks in Wireless Medical Devices


A Super Lawyer and resident of Ambler, Pennsylvania, Brad Rostolsky is the partner in charge of HIPAA and Health Privacy & Security practice at the firm of Reed Smith. In this role, Brad Rostolsky advises clients on HIPAA and health privacy law compliance, which has become especially critical in the age of wireless technology. 

The convergence of technology and information analytics has led to increased opportunities in health care, especially with regard to wireless medical devices, including some pacemakers and automated insulin pumps. These wireless technologies have seen tremendous growth in the last decade. While they have enabled patients to live better, more comfortable lives, they have also opened doors to a new type of risk - cyber security. Many of these technologies receive commands wirelessly, thereby making them susceptible to cyber attacks.

Security experts advise that manufacturers, software developers, hospitals, and other healthcare providers must play a role in managing these security risks. Manufacturers and software developers should take steps to include safeguards in the devices. They will need to remain vigilant of potential cyber security risks and incorporate appropriate security features such as encryption and authentication to protect patients. Hospitals and network providers should also monitor their wireless networks to ensure they are protected from cyber attacks.

Thursday, December 1, 2016

AHLA’s 2017 Annual Medical Centers Program


Friday, September 16, 2016

The Business Law Section at the Philadelphia Bar Association


A health care transactional and regulatory lawyer, Brad Rostolsky is an attorney at the Reed Smith law firm in Philadelphia, Pennsylvania where he leads the group's HIPAA and Health Privacy and Security practice. Brad Rostolsky is also involved in the Philadelphia Bar association and is Co-chair of the Health Law Committee.

The Philadelphia Bar was founded in 1802, making it the oldest professional association of attorneys in the United States. The association provides legal advice on complex issues and also provides a forum for professional growth and networking.

One of the oldest sections of the Philadelphia Bar is the Business Law Section, which encompasses the Health Law Committee that Mr. Rostolsky co-chairs. The section seeks to provide networking and continued education for business lawyers and also communicates relevant industry information to members for use in their practices. In addition to the Heath Law Committee, other examples of committees under the Business Law Section include cyber law, bankruptcy law, and insurance law.                            

Tuesday, September 6, 2016

How HIPAA Affects the Handling of Medical Information


A native of Ambler, Pennsylvania, Brad Rostolsky is a partner at Philadelphia office of Reed Smith. At work, Brad Rostolsky deals with various legal issues affecting the health care industry, including those involving health care privacy.

There are numerous laws that govern how health care entities treat medical information. These laws operate in order to facilitate smoother information flow between members of the healthcare team in balance with the need to keep patient level information private and secure.

One such federal law is the Health Insurance Portability and Accountability Act (HIPAA), which is regarded as the baseline federal legislation that regulates health care information. There are various ways that the HIPAA protects medical information. Among them, it creates a system which controls how certain health information is being disclosed. In relation to this, it establishes the rights of individuals pertaining to their health information.

Additionally, it institutes security standards for regulated entities when they manage or transmit electronic patient information. It must be noted, however, that HIPAA only affects defined regulated entities, which includes health care providers, health care insurers, health care clearinghouses, and vendors to any of the aforementioned types of entities that need to use protected health information to provide their services. Information used by entities not regulated under HIPAA does not implicate the various privacy and security protections afforded under HIPAA.

Wednesday, August 17, 2016

The AHLA Neutrals Program


Brad Rostolsky works with Reed Smith LLP in Philadelphia, where he focuses on HIPAA and health privacy issues. A resident of Ambler, Pennsylvania, he belongs to the American Health Lawyers Association (AHLA). Health lawyers like Brad Rostolsky come together as part of the AHLA to advance the profession through education, volunteer work, and participation in events.

An important program that AHLA provides is its neutrals program that lets members combine health law expertise with negotiation and mediation skills to resolve cases in a fast, fair, and inexpensive manner. Neutrals can serve as arbitrators, mediators, or hearing officers, provided they have appropriate training in that aspect of case resolution. AHLA retains a percentage of the amount invoiced by neutrals in order to operate the program.

AHLA offers its own 14-hour training program for arbitrators, though this training can also be earned elsewhere. Mediators must complete 20 hours of training through a reputable organization, such as a court, law school, or community mediation center. To become a hearing officer, an attorney must complete an AHLA peer-review training course. Those who have already served as counsel or as a hearing officer in two completed hearings, however, do not need to complete the course.

Monday, August 1, 2016

Keep HIPAA Compliant while Working from Home


A partner in the Philadelphia offices of Reed Smith LLP, Brad Rostolsky practices in the firm’s Life Sciences Health Industry Group. Focused primarily on health care regulatory and transactional law, Brad Rostolsky advises clients on information privacy and security compliance under the Health Insurance Portability and Accountability Act (HIPAA).

Because HIPAA directly addresses the need for security in electronic transmission of health-related information, allowing employees to work from home includes the need for companies to take various steps to ensure privacy and security. Companies typically start by assessing their risk, whether employees use a cloud-based system or tap directly into the network. Companies should also implement security protocols at the computer level, such as installing antivirus software and scheduling regular security updates.

Once a company implements security procedures for employees working from home, it should continually monitor the security of its systems and audit employees for compliance. The company must keep a careful log of employees who work from home, which allows for efficient updates of security software and connectivity practices. Implementing policies that address the actual manner in which employees/workforce members interact with the company's system is also critical.