Vimy Devassy, a partner in BakerHostetler’s national healthcare group, focuses her practice on transactions and regulatory matters for healthcare industry clients. She has a wealth of experience in structuring complex transactions among healthcare providers, negotiating a broad spectrum of industry relevant contracts and advising clients on day-to-day regulatory and compliance matters, including fraud and abuse laws and health information laws.
Certified as a Health Care Information Security and Privacy Practitioner (HCISPP), as well as an Information Privacy Professional (CIPP) by the International Association of Privacy Professionals, Vimy serves as Co-Chair of the Healthcare Technology Team. She has extensive experience managing issues related to confidentiality, privacy and security of health information, including compliance with the rubric of state and federal healthcare privacy laws, such as the Health Insurance Portability and Accountability Act (HIPAA), digital health laws, the Telephone Consumer Protection Act (TCPA) and the 21st Century Cures Act requirements, including the information blocking regulations. Her work includes helping clients understand how to align their privacy and information security programs in compliance with applicable laws, respond to potential breach and security incidents, permissibly utilize and share their health data, and navigate complex privacy and security laws as they consider innovative new technologies and business opportunities.