Lynn Sessions

Experience

Privacy and Data Security 

• Has handled more than 600 healthcare data breaches, including several of the largest breaches reported to date. In her representation, provides counsel to healthcare providers and other covered entities on breach analysis; breach response; crisis management with patients, media and employees; and regulatory notification obligations to the Office for Civil Rights (OCR) and state attorneys general.
• Has responded to more than 300 post-breach investigations from the OCR and state attorneys general arising from large and small data breaches reported by covered entities, and has successfully defended healthcare organizations in these investigations.
• Represents educational institutions regarding data breaches, including breach analysis, breach response, crisis management and regulatory reports.
• Advises clients on HIPAA compliance, including preparation of policies and procedures, notice of privacy practices, business associate agreements, and incident response plans. Works with healthcare organizations post-data breach to strengthen safeguards under HIPAA and implement corrective action plans.
• Advises with large non-healthcare employers on HIPAA issues for their self-insured health plans and with on-site provider clinics on HIPAA compliance, including policies and procedures, business associate arrangements, and sharing of employee information. 

Operations and Regulatory Practice 

• Regularly advises hospitals on EMTALA.
• Conducted an audit of a top children’s hospital’s risk management department and advised on departmental and operational changes for improved function within the hospital.
• Develops and enhances credentialing and peer review processes for hospitals and physician groups.
• Advises hospitals and large physician practices on informed consent, release of patient information, affiliation agreements and privileging of peer review and quality review activities. 

Memberships

• American Health Lawyers Association
• AHLA Enterprise Risk Management Task Force: Vice Chair
• American Society for Healthcare Risk Management
• Risk and Insurance Management Society
• American Bar Association
• Houston Bar Association

Community

• Children at Risk: Board of Directors, Chair of Development
• Immunization Partnership: Board of Directors