Cory J. Fox

Associate

Houston
T 713.646.1358  |  F 713.751.1717

Cory Fox focuses his practice on assisting clients in the healthcare industry, with an emphasis on issues related to privacy and data protection pursuant to the Health Insurance Portability and Accountability Act (HIPAA) and related state law. As a former research chemist, Cory leverages his prior experience working with academic medical centers, hospitals, pharmaceutical companies, and other healthcare organizations to efficiently assess a client's internal operations and provide the targeted advice and services necessary to address the wide variety of complex legal issues healthcare organizations face.

Cory is a regular contributor to the firm's Data Privacy Monitor and Health Law Update blogs.

Select Experience

  • Represented two large academic medical centers in data breach matters involving the theft of a laptop through all phases of breach response including crisis management, incident investigation, notification of affected individuals, and reporting to the U.S. Department of Health & Human Services (HHS) Office for Civil Rights (OCR) and state regulators. Assisted with subsequent OCR investigations by responding to requests for information regarding the breach incidents as well as each entity's overall HIPAA compliance. Both investigations closed with no disciplinary action taken.
  • Represented two state chartered credit unions in data breach matters involving malware attacks. Coordinated internal investigations regarding the incidents, preparing notification letters and regulatory filings in accordance with applicable state and federal laws, and providing legal support following breach notification.
  • Advised large hospital system during OCR investigation regarding the hospital's provision of auxiliary aids and services to the hearing impaired under Section 504 of the Rehabilitation Act and the Americans with Disabilities Act. Investigation closed with no disciplinary action taken.
More »

Experience

  • Represented two large academic medical centers in data breach matters involving the theft of a laptop through all phases of breach response including crisis management, incident investigation, notification of affected individuals, and reporting to the U.S. Department of Health & Human Services (HHS) Office for Civil Rights (OCR) and state regulators. Assisted with subsequent OCR investigations by responding to requests for information regarding the breach incidents as well as each entity's overall HIPAA compliance. Both investigations closed with no disciplinary action taken.
  • Represented two state chartered credit unions in data breach matters involving malware attacks. Coordinated internal investigations regarding the incidents, preparing notification letters and regulatory filings in accordance with applicable state and federal laws, and providing legal support following breach notification.
  • Advised large hospital system during OCR investigation regarding the hospital's provision of auxiliary aids and services to the hearing impaired under Section 504 of the Rehabilitation Act and the Americans with Disabilities Act. Investigation closed with no disciplinary action taken.
  • Advised pain management clinic regarding drug diversion matter, including reporting of the incident to the Drug Enforcement Administration (DEA) and implementation of controlled substance recordkeeping policies and procedures. Assisted with subsequent DEA investigation and audit by responding to the DEA's requests for information regarding the diversion incident and the clinic's controlled substance records. No disciplinary action has been taken against the clinic.
  • Assisted two home health agencies with the development and implementation of comprehensive compliance programs addressing fraud and abuse prevention under the Stark Law and the Anti-Kickback statute, health information privacy under HIPAA and Texas law, and operational issues associated with regulations promulgated by the Texas Department of Aging and Disability Services.
  • Advises hospitals, academic medical centers, pharmacies, physicians, and business associates regarding development, implementation, and review of health information privacy policies and procedures pursuant to HIPAA and applicable state law. Assists these entities in periodically revising privacy policies and procedures in response to statutory and regulatory amendments and addresses operational questions related to privacy and safeguarding of patient information.
  • Addresses healthcare operational questions on topics ranging from FDA regulatory matters to organ donation and informed consent issues by investigating and analyzing applicable state and federal statutes and regulations. 

Memberships

  • American Health Lawyers Association
  • International Association of Privacy Professionals
  • American Bar Association
  • State Bar of Texas
  • Houston Bar Association

Services

Industries

Prior Positions

  • U.S. Department of Health and Human Services Office of Counsel to the Inspector General: Summer Law Clerk (Summer 2011)
  • University of Texas Medical Branch: Law Clerk (2010 to 2012) 
  • MD Anderson Cancer Center Department of Pulmonary Medicine: Research Assistant (2009 to 2010)
  • BioAutomation: Research and Development Chemist (2007 to 2009)

Admissions

  • Texas, 2012

Education

  • J.D., University of Houston Law Center, 2012, National Order of Scribes; Chief Articles Editor, Houston Journal of Health Law & Policy; Moot Court
  • B.S., Biology and Chemistry, Texas Tech University, 2007, Beta Beta Beta Biological Honors Society

Blog

In The Blogs

Previous Next
Health Law Update
Joint Employment Finding Leads to Unexpected $3 Million Liability in Hospital Malpractice Case
July 29, 2014
Editor’s note:  This post originally appeared on BakerHostetler’s Employment Law Spotlight blog. When Washington Hospital obtained an insurance policy in 2003 to cover medical claims arising from acts by its employees, its insurer probably...
Read More ->
Data Privacy Monitor
Partner Alan Friel Named Influential Lawyer by LA Business Journal
July 24, 2014
Partner Alan Friel was named among the “Most Influential Lawyers: Digital Media and E-Commerce Law” in the Los Angeles Business Journal’s July 21, 2014, issue. The list recognizes 30 Los Angeles attorneys who have demonstrated outstanding...
Read More ->
Health Law Update
Clash of the Circuits: Federal Exchange Subsidies at Risk?
July 24, 2014
These four words “established by the state,” at first blush do not appear obtuse or particularly vague. But these four words form the basis for the latest challenges to the Affordable Care Act (ACA) and have resulted in two courts issuing...
Read More ->
Data Privacy Monitor
What’s Old is New Again—Insecure Remote Access
July 23, 2014
When a merchant is suspected of being the victim of an account data compromise event, they are often required by the card brands to hire a Payment Card Industry Forensic Investigator (PFI). The PFI provides a report on the investigation to...
Read More ->
Health Law Update
Don’t Pop the Cork Just Yet—Growing Criticism of Massachusetts AG’s Settlement with Partners Healthcare Just Might Send the Parties Back to the Drawing Board
July 23, 2014
After touting a proposed settlement with Partners HealthCare (Partners) that supposedly would “fundamentally alter [Partners’] negotiating power for 10 years and control health costs across [Partners’] entire network,” Massachusetts...
Read More ->