Schedule
12:45
- 14:45
Pre-Conference Workshop: Key Legal Agreements for Data Sharing
Room: Judea Ballroom
This workshop will cover the key legal agreements that are needed when engaging in cross-sector and cross-jurisdictional data sharing, including data sharing agreements, memorandum of understanding, HIPAA business associate agreements and qualified service organization agreements. The goal is to help attendees understand what each agreement covers, how each agreement should be structured and which agreements are necessary to meet their data sharing objectives.
View/download the Presentation Slides
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Jennifer Bernstein, J.D., M.P.H., is a deputy director with the Network’s Mid-States Region Office. She has a Bachelor of Science degree in Women’s Studies and a Certificate in LGBT Studies from the University of Wisconsin-Madison. She received her Juris Doctor and Master of Public Health degrees from the University of Iowa in 2009. During graduate school, Jennifer was a research assistant at the National Health Law and Policy Resource Center. She conducted a multi-state survey of laws related to nursing homes civil monetary penalties for noncompliance and researched the effectiveness of the Medicare and Medicaid nursing home survey process. She also interned at the District of Columbia Primary Care Association, drafting a model state plan amendment for D.C. aimed at expanding language access services for Medicaid patients. Upon graduation, Jennifer was admitted to the Texas State Bar. She accepted the Hogg Foundation Mental Health Policy Fellowship working for Lutheran Social Services of the South in Austin, Texas. She worked during the 82nd Texas Legislative Session advocating for the expansion of trauma informed care throughout the state. She also volunteered as a pro bono attorney for Volunteer Legal Services of Central Texas, representing low income victims of domestic violence.
Jennifer Bernstein, JD, MPH
Deputy Director, The Network for Public Health Law - Mid-States Region Office
15:00
- 17:00
Pre-Conference Workshop: HIPAA Hybrid Entity Rules & Tools
Room: Judea Ballroom
This workshop will provide attendees with an understanding of why the hybrid entity policy option may be beneficial, as well as what tools are needed to become a hybrid entity. This workshop is directed to fully HIPAA covered entities that are interested in exploring hybridizing, as well as hybrid entities that have not recently re-assessed their coverage status. Participants who register by August 1 will receive an invitation to submit a use case for group discussion with hands-on application of tools from the Network’s new HIPAA hybrid entity toolkit.
View/download the Presentation Slides
Download the handouts:
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
16:00
- 18:00
Evening registration
17:00
- 19:00
Happy Hour (Wisdom Room)
08:00
- 09:00
Breakfast (outside of Judea Ballroom)
08:45
- 10:00
Welcome and Opening Keynote
Director, Public Health Informatics Institute
Vivian Singletary, MBA serves as director of the Public Health Informatics Institute (PHII), a program of the Task Force for Global Health. In this role, Vivian guides PHII’s work to improve health outcomes worldwide by strengthening health practitioners’ abilities to use information effectively.
Vivian’s experience combines almost 20 years in systems development and in public health. Earlier in her career, she served in leadership positions in supply chain management and information systems implementation for Home Depot and M&M before transitioning into public health. She was introduced to the Task Force for Global health in 2009 as the global supply chain manager for the International Trachoma Initiative, where she oversaw the pharmaceutical supply chain of over $1 billion in Zithromax donations and built in-country capacity for over 15 African and Asian countries.
Vivian has played an integral role in developing PHII’s global portfolio. Her work for the institute began with improving, designing and analyzing business processes and developing functional requirements for health insurance information systems. She established PHII’s Requirements Laboratory business unit in 2012. As the unit’s director, Vivian played an essential part in managing informatics projects in both the U.S. and in developing countries. Key projects include her leadership role in developing the African Workforce Planning project—a tool that helps allocate health care practitioners to areas of greatest need in Mozambique and Tanzania—and acting as director of informatics practice for the Child Health and Mortality Prevention Surveillance (CHAMPS) initiative, which addresses the causes of childhood mortality in developing countries.
Vivian holds a master’s of business administration degree from Kennesaw State University and a juris master’s degree from Emory University School of Law, with a focus on global health. She also holds a bachelor’s degree in industrial engineering from the Georgia Institute of Technology.
Vivian Singletary, MBA, JM
Director, Public Health Informatics Institute
10:15
- 12:15
Concurrent Sessions
Concurrent sessions based on legal parameters of collecting or sharing different types of data.
Breakout one: Navigating Law to Share Data: Privacy and Security Fundamentals
Room: Ruth
Building healthy communities requires access to relevant data between programs within an agency (e.g. public health department) as well as from multiple sectors, including public health, healthcare, schools, human services, housing, and law enforcement. Data are essential for identifying health threats, designing interventions, coordinating care, measuring what works and planning for policy, systems and environmental change. A complex legal landscape, and lack of knowledge and training in law, result in actual and perceived barriers to data collection, use, and sharing. This session will cover privacy and security fundamentals. It will provide a systematic approach to identifying and resolving legal issues, describing strategies to navigate law and share the most meaningful data possible while protecting privacy, promoting security, and maintaining trust.
• Speakers: Denise Chrysler, Colin Boes
View/download the Presentation Slides
Breakout two: Behavioral, Mental Health and Primary Health Care
Room: Judith & Esther
This session examines how HIPAA, 42 CFR Part 2 and state mental health laws create designated pathways for behavioral health, mental health and primary care data collecting and sharing. All within the context of these practice areas, presenters provide an overview of identification of law by data type and data source; review permissible uses and disclosures, along with prerequisites, conditions and limitations; address application of these laws to a data sharing issue; review legal solutions, such as a consent process, disclosure for research with IRB/Privacy Board approved waiver or de-identification; and review establishing and documenting terms of data sharing. This session is designed for individuals who already have a fundamental understanding of data sharing. Participants receive an in-depth review of behavioral health, mental health and primary care law identification and navigation, along with participating in small group discussion around a variety of data collection and sharing scenarios.
• Session Leader: Sallie Milam
• Speaker: Elizabeth Scurria Morgan
View/download the Presentation Slides
Download the Handout:
Breakout three: Education
Room: Sarah
Schools collect and maintain a vast amount of information related to students and their health. The ability to exchange data with other agencies and health care providers is important for enhancing continuity of care, improving students’ health management at school, and for conducting important research. This session will present the real-world challenges of data privacy and data sharing in the K-12 setting and will assist school nurses and other school officials in ensuring a smooth two-way process of health information sharing in accordance with the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA).
• Speakers: Kerri McGowan Lowrey, Elliott Attisha
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
Director, The Network for Public Health Law - Mid-States Region Office
Denise Chrysler, J.D., serves as director of the Network’s Mid-States Region Office. Previously, she served as the public health legal director for the Michigan Department of Community Health (MDCH). In this position, she coordinated the legal needs of the Public Health Administration and provided legal expertise and assistance regarding public health powers, programs and services. Denise also serves on the Ingham County (Michigan) Board of Health.
Denise served as an assistant attorney general for 20 years. There, she provided legal advice and representation to programs that protect the public’s health, safety and welfare in the Michigan Departments of Community Health, Agriculture and Environmental Quality. She is the recipient of the Frank J. Kelley Award for Excellence for successful efforts to protect mammograms and medical records of some 200,000 patients in Southeast Michigan who were abandoned by a bankrupt health provider. Denise graduated from the University of Michigan Law School in 1980. She is a member of the Public Health Law Association and the State Bar Health Care Law Section. She is admitted to practice before both state and federal courts in Michigan.
Denise Chrysler, JD
Director, The Network for Public Health Law - Mid-States Region Office
Privacy Specialist - Michigan Department of Health and Human Services Legal Affairs
Colin Boes, JD
Privacy Specialist - Michigan Department of Health and Human Services Legal Affairs
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Deputy Director and Director of Grants and Research, The Network for Public Health Law - Eastern Region Office
Kerri McGowan Lowrey, J.D., M.P.H., is deputy director of the Network’s Eastern Region Office. She has over 15 years of experience in health law and policy research, primary and secondary legal and legislative analysis, and empirical legal and legislative research. Much of her recent work centers on law and policy addressing concussions and other injuries in youth sports. Her areas of research have also included the role of law in cancer prevention, particularly in the area of obesity prevention; health disparities and social determinants of health; the use of epidemiological evidence in courts; and legal and ethical implications of emerging technologies. Kerri is a member of the bar of the Maryland Court of Special Appeals. Her specialized training includes a four-year term as a cancer prevention fellow within the NCI’s Office of Preventive Oncology, where she assisted in developing the Cancer Prevention Fellowship Ethics Track. Prior to joining the Network for Public Health Law, Kerri served as technical vice president and manager of the Center for Health Policy and Legislative Analysis at the MayaTech Corporation in Silver Spring, MD. Kerri received a J.D. from the University of Maryland School of Law in 1999, an M.P.H. from the Johns Hopkins University Bloomberg School of Public Health in 2001 and A.B. in public policy and American institutions from Brown University in 1996.
Kerri McGowan Lowrey, JD, MPH
Deputy Director and Director of Grants and Research, The Network for Public Health Law - Eastern Region Office
Chief Health Officer, Detroit Public Schools
Elliott Attisha, DO, FAAP
Chief Health Officer, Detroit Public Schools
12:30
- 13:30
Lunch Featured Speaker
Room: Judea Ballroom
Understanding Tribal Data and Enhancing Tribal Sovereignty
General Counsel & Executive Officer, Chickasaw Nation
Debra Gee, JD
General Counsel & Executive Officer, Chickasaw Nation
13:45
- 15:45
Concurrent Sessions
Concurrent sessions based on legal parameters of collecting or sharing different types of data.
Breakout one: Behavioral, Mental Health and Primary Health Care
Room: Judith & Esther
This session examines how HIPAA, 42 CFR Part 2 and state mental health laws create designated pathways for behavioral health, mental health and primary care data collecting and sharing. All within the context of these practice areas, presenters provide an overview of identification of law by data type and data source; review permissible uses and disclosures, along with prerequisites, conditions and limitations; address application of these laws to a data sharing issue; review legal solutions, such as a consent process, disclosure for research with IRB/Privacy Board approved waiver or de-identification; and review establishing and documenting terms of data sharing. This session is designed for individuals who already have a fundamental understanding of data sharing. Participants receive an in-depth review of behavioral health, mental health and primary care law identification and navigation, along with participating in small group discussion around a variety of data collection and sharing scenarios.
• Session Leader: Sallie Milam
• Speaker: Elizabeth Scurria Morgan
View/download the Presentation Slides
Download the Handout:
Breakout two: Law Enforcement and Criminal Justice
Room: Sarah
During this session, the speakers will have a moderated discussion that covers data sharing issues related to law enforcement and criminal justice, including jail diversion, working with prosecutors and law enforcement agencies, and the role of data in specialty courts. Attendees will work through an interactive activity on law enforcement and criminal justice considerations for information sharing during a mental health emergency. Attendees will map out data workflows, identify red flag points for consent and identify opportunities to intercede by using data effectively.
• Speakers: Hudson Harris, Monika Tzoneva
Breakout three: Public Health and Environmental Health
Room: Ruth
Environmental factors are linked to many of today’s most pressing health challenges. Yet the data that is crucial to understanding and addressing these challenges can be difficult to obtain and use, in part because the data are often collected by multiple agencies which may not work in tandem with one another. This session will explore legal strategies and obstacles associated with collecting, using, and sharing different types of environmental health data along with legal mechanisms for protecting individual privacy while still informing the public of threats in their environment.
• Speakers: Colleen Healy Boufides, Denise Chrysler, Sangeeta Ghosh
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Founder, Pandon
With deep expertise across mental health, legal, and business worlds, Hudson has earned a reputation for technology-enabled innovation that spans traditional boundaries to create inspired programs that improve access, quality, and patience experience. In the public sphere Hudson spends extensive time with governments, social service agencies, and universities to gain a deep understanding of complex problems to build novel solutions that span traditional boundaries. In the private sector, he works with companies to build go-to-market strategy, as well as channel and partner development. Hudson’s mission is to improve the accessibility and quality of mental healthcare through cross sector collaboration and technology driven innovation.
Hudson Harris, JD, MBA
Founder, Pandon
Compliance and Privacy Officer, Department of Community and Human Services - King County, WA
Monika Tzoneva, JD, PhD, CHC
Compliance and Privacy Officer, Department of Community and Human Services - King County, WA
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Colleen Healy Boufides, J.D., is a deputy director with the Network’s Mid-States Region Office. Colleen received her J.D. from the Duke University School of Law. While in law school, she served as Articles Editor for the Duke Forum for Law & Social Change and worked at the National Health Law Program as a legal intern. Prior to law school, Colleen received a B.S. from Arizona State University – the Barrett Honors College, where she studied psychology and global health and wrote her honors thesis on the role of community health workers in a local Women, Infants, and Children (WIC) supplemental nutrition program.
Colleen is a member of the Michigan State Bar. Prior to joining the Network, Colleen worked at the Michigan Primary Care Association, where she was involved in state and federal legislative and administrative advocacy on behalf of Michigan’s federally qualified health centers. Colleen has also worked as a commercial litigation associate for Miller Canfield Paddock and Stone, PLC, a large Michigan-based law firm. While at the firm, Colleen provided pro bono assistance to a nonprofit harm reduction organization and served on the board of a local health center and a nonprofit focused on economic empowerment, where she assisted with launching annual expungement workshops.
Colleen Healy Boufides, JD
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Director, The Network for Public Health Law - Mid-States Region Office
Denise Chrysler, J.D., serves as director of the Network’s Mid-States Region Office. Previously, she served as the public health legal director for the Michigan Department of Community Health (MDCH). In this position, she coordinated the legal needs of the Public Health Administration and provided legal expertise and assistance regarding public health powers, programs and services. Denise also serves on the Ingham County (Michigan) Board of Health.
Denise served as an assistant attorney general for 20 years. There, she provided legal advice and representation to programs that protect the public’s health, safety and welfare in the Michigan Departments of Community Health, Agriculture and Environmental Quality. She is the recipient of the Frank J. Kelley Award for Excellence for successful efforts to protect mammograms and medical records of some 200,000 patients in Southeast Michigan who were abandoned by a bankrupt health provider. Denise graduated from the University of Michigan Law School in 1980. She is a member of the Public Health Law Association and the State Bar Health Care Law Section. She is admitted to practice before both state and federal courts in Michigan.
Denise Chrysler, JD
Director, The Network for Public Health Law - Mid-States Region Office
Assistant Corporate Counsel, Kent County
Sangeeta Ghosh, JD, LL.M.
Assistant Corporate Counsel, Kent County
16:00
- 17:00
Afternoon Session: Informing the Public
Public Benefits and Private Risks: How should Public Health Policy properly balance societal ethical interests and individual rights?
Room: Judea Ballroom
Balancing important societal ethical interests (justice, beneficence and public good) with individual rights and protections can be a challenging issue for public health policy. This session will provide an overview of public health data de-identification as an important tool to make data more freely, safely and legally available to public health and communities while appropriately balancing public and private interests. This session will explain the process of data re-identification risk assessments in informing data disclosure policies and provide an overview of the HIPAA “statistical de-identification” provision. Attendees will develop an awareness of the efficacy of modern data de-identification methods and the importance of utilizing a combination of technical and management controls (such as data use agreements) to appropriately mitigate privacy risks in balance with public benefits.
View/download the Presentation Slides
Assistant Professor of Clinical Epidemiology, Columbia University Mailman School of Public Health
Daniel Barth-Jones, PhD, MPH
Assistant Professor of Clinical Epidemiology, Columbia University Mailman School of Public Health
17:30
- 19:30
Reception in Atrium
17:52
Continental Breakfast
08:00
- 09:00
Breakfast (Judea Ballroom)
09:00
- 10:15
Concurrent Sessions
Breakout one: Data Governance
Room: Sarah
When health care providers, public health and others create, use and share data, governance is required to ensure that trust is maintained and interoperability risks are appropriately managed. This session highlights how governance is achieved by providing coordination and oversight through a policy framework, a decision-making body and trust agreement. Examples of governance in action will include the Data Use and Reciprocal Support Agreement, and Trusted Exchange Framework and Common Agreement. Attendees will learn how governance and interoperability improve disaster response which saves lives and relieves stress in an emergency. Attendees will also learn how interoperability and governance reduce the burden of public health case reporting for the provider community, while improving the timeliness, accuracy and completeness of the data.
• Moderator: Sallie Milam
• Speakers: Steve Gravely, Troy Willitt
View/download the Presentation Slides
Breakout two: Open Data, FOIA and Sunshine Laws
Room: Ruth
Freedom of information laws vary widely from state to state. However, balancing individual privacy with public access to information held by the government is a common challenge. This difficulty has only increased as data grows more complex. This session will explore various frameworks for navigating this tension, and discuss legal and practical approaches to making information available to promote public health.
• Speakers: Elizabeth Scurria Morgan, Katherine Alford
View/download the Presentation Slides
Breakout three: Ethical Considerations of Data Sharing
Room: Judith
Law and ethics are critical tools for resolving data use issues. This session will explore and contrast bioethics (e.g., Common Rule) and public health ethics (e.g., WHO Guidelines on Ethical Issues in Public Health Surveillance), and discuss how different ethical frameworks can lead to different conclusions and even raise novel questions. Interactive components throughout the session will provide participants opportunities to learn from their peers and share challenges. Participants will learn how public health ethics can be used as a tool to support data use projects.
• Speaker: Cason Schmit
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
CEO - Strategic and Legal Advisor to Healthcare Organizations, Gravely Group
Formerly a partner at Troutman Sanders, Mr. Gravely focused his practice in the areas of health law, information privacy and cybersecurity, and emergency preparedness and response issues for critical infrastructure industries. He has represented healthcare organizations for over 20 years in a full spectrum of healthcare legal issues. Mr. Gravely is certified by the International Association of Privacy Professionals (IAPP) as a Certified Information Privacy Professional in the United States (CIPP/US). He has served as advisor on numerous initiatives related to emergency preparedness and health information exchanges. Mr. Gravely has authored numerous whitepapers and articles on key emergency preparedness issues, as well as health data privacy risks.
Steve Gravely
CEO - Strategic and Legal Advisor to Healthcare Organizations, Gravely Group
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Deputy General Counsel, Massachusetts Department of Public Health
Katherine Alford, JD, CIPP/US
Deputy General Counsel, Massachusetts Department of Public Health
Research Assistant Professor, Texas A&M University School of Public Health
Cason Schmit is a research assistant professor at the Department of Health Policy and Management where he actively researches the role of law in health systems.
Prior to joining Texas A&M University, he worked for the U.S. Centers for Disease Control and Prevention (CDC) Public Health Law Program as an Oak Ridge Institute for Science Education legal fellow (2013-2015) and as a federal contractor (2015-2016). There he worked with public health professionals within CDC centers and offices and state, tribal, local, and territorial partners to promote the use of law as a tool to improve the public’s health. His research with CDC focused on the role of law in health system transformation, including the use of electronic health information to promote public health, state innovation models, pay-for-success initiatives, and pharmacists’ vaccination authority.
Cason Schmit, JD
Research Assistant Professor, Texas A&M University School of Public Health
10:30
- 12:00
Closing Session: Navigating HIPAA in a Geospatial World
Room: Judea Ballroom
When public health shares information with communities, it balances assuring the public good with the risk to individual privacy. This session examines how public health utilizes mapping technologies to monitor health status to identify and solve community health problems; diagnose and investigate health problems and health hazards in the community; inform, educate, and empower people about health issues, creating a space for public action; and, assist public health agencies in fulfilling the 10 Essential Public Health Services. Geographic information systems use geographic data, such as streets, blocks or neighborhood areas and attribute data, such as social determinants of health, and link the two in a map. Attendees learn about implementing privacy controls for useful and locally relevant map design.
View/download the Presentation Slides
Chief Medical Officer, Esri
Estella Geraghty, MD, MS, MPH, GISP
Chief Medical Officer, Esri
12:45
- 14:45
Pre-Conference Workshop: Key Legal Agreements for Data Sharing
Room: Judea Ballroom
This workshop will cover the key legal agreements that are needed when engaging in cross-sector and cross-jurisdictional data sharing, including data sharing agreements, memorandum of understanding, HIPAA business associate agreements and qualified service organization agreements. The goal is to help attendees understand what each agreement covers, how each agreement should be structured and which agreements are necessary to meet their data sharing objectives.
View/download the Presentation Slides
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Jennifer Bernstein, J.D., M.P.H., is a deputy director with the Network’s Mid-States Region Office. She has a Bachelor of Science degree in Women’s Studies and a Certificate in LGBT Studies from the University of Wisconsin-Madison. She received her Juris Doctor and Master of Public Health degrees from the University of Iowa in 2009. During graduate school, Jennifer was a research assistant at the National Health Law and Policy Resource Center. She conducted a multi-state survey of laws related to nursing homes civil monetary penalties for noncompliance and researched the effectiveness of the Medicare and Medicaid nursing home survey process. She also interned at the District of Columbia Primary Care Association, drafting a model state plan amendment for D.C. aimed at expanding language access services for Medicaid patients. Upon graduation, Jennifer was admitted to the Texas State Bar. She accepted the Hogg Foundation Mental Health Policy Fellowship working for Lutheran Social Services of the South in Austin, Texas. She worked during the 82nd Texas Legislative Session advocating for the expansion of trauma informed care throughout the state. She also volunteered as a pro bono attorney for Volunteer Legal Services of Central Texas, representing low income victims of domestic violence.
Jennifer Bernstein, JD, MPH
Deputy Director, The Network for Public Health Law - Mid-States Region Office
15:00
- 17:00
Pre-Conference Workshop: HIPAA Hybrid Entity Rules & Tools
Room: Judea Ballroom
This workshop will provide attendees with an understanding of why the hybrid entity policy option may be beneficial, as well as what tools are needed to become a hybrid entity. This workshop is directed to fully HIPAA covered entities that are interested in exploring hybridizing, as well as hybrid entities that have not recently re-assessed their coverage status. Participants who register by August 1 will receive an invitation to submit a use case for group discussion with hands-on application of tools from the Network’s new HIPAA hybrid entity toolkit.
View/download the Presentation Slides
Download the handouts:
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
16:00
- 18:00
Evening registration
17:00
- 19:00
Happy Hour (Wisdom Room)
08:00
- 09:00
Breakfast (outside of Judea Ballroom)
08:45
- 10:00
Welcome and Opening Keynote
Director, Public Health Informatics Institute
Vivian Singletary, MBA serves as director of the Public Health Informatics Institute (PHII), a program of the Task Force for Global Health. In this role, Vivian guides PHII’s work to improve health outcomes worldwide by strengthening health practitioners’ abilities to use information effectively.
Vivian’s experience combines almost 20 years in systems development and in public health. Earlier in her career, she served in leadership positions in supply chain management and information systems implementation for Home Depot and M&M before transitioning into public health. She was introduced to the Task Force for Global health in 2009 as the global supply chain manager for the International Trachoma Initiative, where she oversaw the pharmaceutical supply chain of over $1 billion in Zithromax donations and built in-country capacity for over 15 African and Asian countries.
Vivian has played an integral role in developing PHII’s global portfolio. Her work for the institute began with improving, designing and analyzing business processes and developing functional requirements for health insurance information systems. She established PHII’s Requirements Laboratory business unit in 2012. As the unit’s director, Vivian played an essential part in managing informatics projects in both the U.S. and in developing countries. Key projects include her leadership role in developing the African Workforce Planning project—a tool that helps allocate health care practitioners to areas of greatest need in Mozambique and Tanzania—and acting as director of informatics practice for the Child Health and Mortality Prevention Surveillance (CHAMPS) initiative, which addresses the causes of childhood mortality in developing countries.
Vivian holds a master’s of business administration degree from Kennesaw State University and a juris master’s degree from Emory University School of Law, with a focus on global health. She also holds a bachelor’s degree in industrial engineering from the Georgia Institute of Technology.
Vivian Singletary, MBA, JM
Director, Public Health Informatics Institute
10:15
- 12:15
Concurrent Sessions
Concurrent sessions based on legal parameters of collecting or sharing different types of data.
Breakout one: Navigating Law to Share Data: Privacy and Security Fundamentals
Room: Ruth
Building healthy communities requires access to relevant data between programs within an agency (e.g. public health department) as well as from multiple sectors, including public health, healthcare, schools, human services, housing, and law enforcement. Data are essential for identifying health threats, designing interventions, coordinating care, measuring what works and planning for policy, systems and environmental change. A complex legal landscape, and lack of knowledge and training in law, result in actual and perceived barriers to data collection, use, and sharing. This session will cover privacy and security fundamentals. It will provide a systematic approach to identifying and resolving legal issues, describing strategies to navigate law and share the most meaningful data possible while protecting privacy, promoting security, and maintaining trust.
• Speakers: Denise Chrysler, Colin Boes
View/download the Presentation Slides
Breakout two: Behavioral, Mental Health and Primary Health Care
Room: Judith & Esther
This session examines how HIPAA, 42 CFR Part 2 and state mental health laws create designated pathways for behavioral health, mental health and primary care data collecting and sharing. All within the context of these practice areas, presenters provide an overview of identification of law by data type and data source; review permissible uses and disclosures, along with prerequisites, conditions and limitations; address application of these laws to a data sharing issue; review legal solutions, such as a consent process, disclosure for research with IRB/Privacy Board approved waiver or de-identification; and review establishing and documenting terms of data sharing. This session is designed for individuals who already have a fundamental understanding of data sharing. Participants receive an in-depth review of behavioral health, mental health and primary care law identification and navigation, along with participating in small group discussion around a variety of data collection and sharing scenarios.
• Session Leader: Sallie Milam
• Speaker: Elizabeth Scurria Morgan
View/download the Presentation Slides
Download the Handout:
Breakout three: Education
Room: Sarah
Schools collect and maintain a vast amount of information related to students and their health. The ability to exchange data with other agencies and health care providers is important for enhancing continuity of care, improving students’ health management at school, and for conducting important research. This session will present the real-world challenges of data privacy and data sharing in the K-12 setting and will assist school nurses and other school officials in ensuring a smooth two-way process of health information sharing in accordance with the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA).
• Speakers: Kerri McGowan Lowrey, Elliott Attisha
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
Director, The Network for Public Health Law - Mid-States Region Office
Denise Chrysler, J.D., serves as director of the Network’s Mid-States Region Office. Previously, she served as the public health legal director for the Michigan Department of Community Health (MDCH). In this position, she coordinated the legal needs of the Public Health Administration and provided legal expertise and assistance regarding public health powers, programs and services. Denise also serves on the Ingham County (Michigan) Board of Health.
Denise served as an assistant attorney general for 20 years. There, she provided legal advice and representation to programs that protect the public’s health, safety and welfare in the Michigan Departments of Community Health, Agriculture and Environmental Quality. She is the recipient of the Frank J. Kelley Award for Excellence for successful efforts to protect mammograms and medical records of some 200,000 patients in Southeast Michigan who were abandoned by a bankrupt health provider. Denise graduated from the University of Michigan Law School in 1980. She is a member of the Public Health Law Association and the State Bar Health Care Law Section. She is admitted to practice before both state and federal courts in Michigan.
Denise Chrysler, JD
Director, The Network for Public Health Law - Mid-States Region Office
Privacy Specialist - Michigan Department of Health and Human Services Legal Affairs
Colin Boes, JD
Privacy Specialist - Michigan Department of Health and Human Services Legal Affairs
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Deputy Director and Director of Grants and Research, The Network for Public Health Law - Eastern Region Office
Kerri McGowan Lowrey, J.D., M.P.H., is deputy director of the Network’s Eastern Region Office. She has over 15 years of experience in health law and policy research, primary and secondary legal and legislative analysis, and empirical legal and legislative research. Much of her recent work centers on law and policy addressing concussions and other injuries in youth sports. Her areas of research have also included the role of law in cancer prevention, particularly in the area of obesity prevention; health disparities and social determinants of health; the use of epidemiological evidence in courts; and legal and ethical implications of emerging technologies. Kerri is a member of the bar of the Maryland Court of Special Appeals. Her specialized training includes a four-year term as a cancer prevention fellow within the NCI’s Office of Preventive Oncology, where she assisted in developing the Cancer Prevention Fellowship Ethics Track. Prior to joining the Network for Public Health Law, Kerri served as technical vice president and manager of the Center for Health Policy and Legislative Analysis at the MayaTech Corporation in Silver Spring, MD. Kerri received a J.D. from the University of Maryland School of Law in 1999, an M.P.H. from the Johns Hopkins University Bloomberg School of Public Health in 2001 and A.B. in public policy and American institutions from Brown University in 1996.
Kerri McGowan Lowrey, JD, MPH
Deputy Director and Director of Grants and Research, The Network for Public Health Law - Eastern Region Office
Chief Health Officer, Detroit Public Schools
Elliott Attisha, DO, FAAP
Chief Health Officer, Detroit Public Schools
12:30
- 13:30
Lunch Featured Speaker
Room: Judea Ballroom
Understanding Tribal Data and Enhancing Tribal Sovereignty
General Counsel & Executive Officer, Chickasaw Nation
Debra Gee, JD
General Counsel & Executive Officer, Chickasaw Nation
13:45
- 15:45
Concurrent Sessions
Concurrent sessions based on legal parameters of collecting or sharing different types of data.
Breakout one: Behavioral, Mental Health and Primary Health Care
Room: Judith & Esther
This session examines how HIPAA, 42 CFR Part 2 and state mental health laws create designated pathways for behavioral health, mental health and primary care data collecting and sharing. All within the context of these practice areas, presenters provide an overview of identification of law by data type and data source; review permissible uses and disclosures, along with prerequisites, conditions and limitations; address application of these laws to a data sharing issue; review legal solutions, such as a consent process, disclosure for research with IRB/Privacy Board approved waiver or de-identification; and review establishing and documenting terms of data sharing. This session is designed for individuals who already have a fundamental understanding of data sharing. Participants receive an in-depth review of behavioral health, mental health and primary care law identification and navigation, along with participating in small group discussion around a variety of data collection and sharing scenarios.
• Session Leader: Sallie Milam
• Speaker: Elizabeth Scurria Morgan
View/download the Presentation Slides
Download the Handout:
Breakout two: Law Enforcement and Criminal Justice
Room: Sarah
During this session, the speakers will have a moderated discussion that covers data sharing issues related to law enforcement and criminal justice, including jail diversion, working with prosecutors and law enforcement agencies, and the role of data in specialty courts. Attendees will work through an interactive activity on law enforcement and criminal justice considerations for information sharing during a mental health emergency. Attendees will map out data workflows, identify red flag points for consent and identify opportunities to intercede by using data effectively.
• Speakers: Hudson Harris, Monika Tzoneva
Breakout three: Public Health and Environmental Health
Room: Ruth
Environmental factors are linked to many of today’s most pressing health challenges. Yet the data that is crucial to understanding and addressing these challenges can be difficult to obtain and use, in part because the data are often collected by multiple agencies which may not work in tandem with one another. This session will explore legal strategies and obstacles associated with collecting, using, and sharing different types of environmental health data along with legal mechanisms for protecting individual privacy while still informing the public of threats in their environment.
• Speakers: Colleen Healy Boufides, Denise Chrysler, Sangeeta Ghosh
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Sallie Milam, JD, CIPP/US/G, is a deputy director of the Network’s Mid-States Region Office. Sallie has practiced law for over 25 years primarily in the health, HIPAA and general privacy areas. She is a Certified Information Privacy Professional, with U.S. and government privacy certifications. She has extensive experience in working with state agencies on data related issues. From 2003 to 2018, Sallie served as West Virginia’s chief privacy officer and led the executive branch’s privacy program. Previously, Sallie facilitated data sharing through her service as the West Virginia Health Care Authority’s privacy officer and as HIPAA senior legal counsel, where she led HIPAA privacy implementation across the West Virginia executive branch. Additionally, she was the first executive director of the West Virginia Health Information Network, which is West Virginia’s statewide health information exchange, and was West Virginia’s project director for its Nationwide Health Information Network contract.
Sallie Milam, JD, CIPP/US/G
Deputy Director, The Network for Public Health Law - Mid-States Region Office
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Founder, Pandon
With deep expertise across mental health, legal, and business worlds, Hudson has earned a reputation for technology-enabled innovation that spans traditional boundaries to create inspired programs that improve access, quality, and patience experience. In the public sphere Hudson spends extensive time with governments, social service agencies, and universities to gain a deep understanding of complex problems to build novel solutions that span traditional boundaries. In the private sector, he works with companies to build go-to-market strategy, as well as channel and partner development. Hudson’s mission is to improve the accessibility and quality of mental healthcare through cross sector collaboration and technology driven innovation.
Hudson Harris, JD, MBA
Founder, Pandon
Compliance and Privacy Officer, Department of Community and Human Services - King County, WA
Monika Tzoneva, JD, PhD, CHC
Compliance and Privacy Officer, Department of Community and Human Services - King County, WA
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Colleen Healy Boufides, J.D., is a deputy director with the Network’s Mid-States Region Office. Colleen received her J.D. from the Duke University School of Law. While in law school, she served as Articles Editor for the Duke Forum for Law & Social Change and worked at the National Health Law Program as a legal intern. Prior to law school, Colleen received a B.S. from Arizona State University – the Barrett Honors College, where she studied psychology and global health and wrote her honors thesis on the role of community health workers in a local Women, Infants, and Children (WIC) supplemental nutrition program.
Colleen is a member of the Michigan State Bar. Prior to joining the Network, Colleen worked at the Michigan Primary Care Association, where she was involved in state and federal legislative and administrative advocacy on behalf of Michigan’s federally qualified health centers. Colleen has also worked as a commercial litigation associate for Miller Canfield Paddock and Stone, PLC, a large Michigan-based law firm. While at the firm, Colleen provided pro bono assistance to a nonprofit harm reduction organization and served on the board of a local health center and a nonprofit focused on economic empowerment, where she assisted with launching annual expungement workshops.
Colleen Healy Boufides, JD
Deputy Director, The Network for Public Health Law - Mid-States Region Office
Director, The Network for Public Health Law - Mid-States Region Office
Denise Chrysler, J.D., serves as director of the Network’s Mid-States Region Office. Previously, she served as the public health legal director for the Michigan Department of Community Health (MDCH). In this position, she coordinated the legal needs of the Public Health Administration and provided legal expertise and assistance regarding public health powers, programs and services. Denise also serves on the Ingham County (Michigan) Board of Health.
Denise served as an assistant attorney general for 20 years. There, she provided legal advice and representation to programs that protect the public’s health, safety and welfare in the Michigan Departments of Community Health, Agriculture and Environmental Quality. She is the recipient of the Frank J. Kelley Award for Excellence for successful efforts to protect mammograms and medical records of some 200,000 patients in Southeast Michigan who were abandoned by a bankrupt health provider. Denise graduated from the University of Michigan Law School in 1980. She is a member of the Public Health Law Association and the State Bar Health Care Law Section. She is admitted to practice before both state and federal courts in Michigan.
Denise Chrysler, JD
Director, The Network for Public Health Law - Mid-States Region Office
Assistant Corporate Counsel, Kent County
Sangeeta Ghosh, JD, LL.M.
Assistant Corporate Counsel, Kent County
16:00
- 17:00
Afternoon Session: Informing the Public
Public Benefits and Private Risks: How should Public Health Policy properly balance societal ethical interests and individual rights?
Room: Judea Ballroom
Balancing important societal ethical interests (justice, beneficence and public good) with individual rights and protections can be a challenging issue for public health policy. This session will provide an overview of public health data de-identification as an important tool to make data more freely, safely and legally available to public health and communities while appropriately balancing public and private interests. This session will explain the process of data re-identification risk assessments in informing data disclosure policies and provide an overview of the HIPAA “statistical de-identification” provision. Attendees will develop an awareness of the efficacy of modern data de-identification methods and the importance of utilizing a combination of technical and management controls (such as data use agreements) to appropriately mitigate privacy risks in balance with public benefits.
View/download the Presentation Slides
Assistant Professor of Clinical Epidemiology, Columbia University Mailman School of Public Health
Daniel Barth-Jones, PhD, MPH
Assistant Professor of Clinical Epidemiology, Columbia University Mailman School of Public Health
17:30
- 19:30
Reception in Atrium
17:52
Continental Breakfast
08:00
- 09:00
Breakfast (Judea Ballroom)
09:00
- 10:15
Concurrent Sessions
Breakout one: Data Governance
Room: Sarah
When health care providers, public health and others create, use and share data, governance is required to ensure that trust is maintained and interoperability risks are appropriately managed. This session highlights how governance is achieved by providing coordination and oversight through a policy framework, a decision-making body and trust agreement. Examples of governance in action will include the Data Use and Reciprocal Support Agreement, and Trusted Exchange Framework and Common Agreement. Attendees will learn how governance and interoperability improve disaster response which saves lives and relieves stress in an emergency. Attendees will also learn how interoperability and governance reduce the burden of public health case reporting for the provider community, while improving the timeliness, accuracy and completeness of the data.
• Moderator: Sallie Milam
• Speakers: Steve Gravely, Troy Willitt
View/download the Presentation Slides
Breakout two: Open Data, FOIA and Sunshine Laws
Room: Ruth
Freedom of information laws vary widely from state to state. However, balancing individual privacy with public access to information held by the government is a common challenge. This difficulty has only increased as data grows more complex. This session will explore various frameworks for navigating this tension, and discuss legal and practical approaches to making information available to promote public health.
• Speakers: Elizabeth Scurria Morgan, Katherine Alford
View/download the Presentation Slides
Breakout three: Ethical Considerations of Data Sharing
Room: Judith
Law and ethics are critical tools for resolving data use issues. This session will explore and contrast bioethics (e.g., Common Rule) and public health ethics (e.g., WHO Guidelines on Ethical Issues in Public Health Surveillance), and discuss how different ethical frameworks can lead to different conclusions and even raise novel questions. Interactive components throughout the session will provide participants opportunities to learn from their peers and share challenges. Participants will learn how public health ethics can be used as a tool to support data use projects.
• Speaker: Cason Schmit
View/download the Presentation Slides
Click on a presenter’s name below to learn more about them:
CEO - Strategic and Legal Advisor to Healthcare Organizations, Gravely Group
Formerly a partner at Troutman Sanders, Mr. Gravely focused his practice in the areas of health law, information privacy and cybersecurity, and emergency preparedness and response issues for critical infrastructure industries. He has represented healthcare organizations for over 20 years in a full spectrum of healthcare legal issues. Mr. Gravely is certified by the International Association of Privacy Professionals (IAPP) as a Certified Information Privacy Professional in the United States (CIPP/US). He has served as advisor on numerous initiatives related to emergency preparedness and health information exchanges. Mr. Gravely has authored numerous whitepapers and articles on key emergency preparedness issues, as well as health data privacy risks.
Steve Gravely
CEO - Strategic and Legal Advisor to Healthcare Organizations, Gravely Group
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Elizabeth Scurria Morgan
First Deputy General Counsel and Director, Privacy & Data Compliance Office, Massachusetts Department of Public Health
Deputy General Counsel, Massachusetts Department of Public Health
Katherine Alford, JD, CIPP/US
Deputy General Counsel, Massachusetts Department of Public Health
Research Assistant Professor, Texas A&M University School of Public Health
Cason Schmit is a research assistant professor at the Department of Health Policy and Management where he actively researches the role of law in health systems.
Prior to joining Texas A&M University, he worked for the U.S. Centers for Disease Control and Prevention (CDC) Public Health Law Program as an Oak Ridge Institute for Science Education legal fellow (2013-2015) and as a federal contractor (2015-2016). There he worked with public health professionals within CDC centers and offices and state, tribal, local, and territorial partners to promote the use of law as a tool to improve the public’s health. His research with CDC focused on the role of law in health system transformation, including the use of electronic health information to promote public health, state innovation models, pay-for-success initiatives, and pharmacists’ vaccination authority.
Cason Schmit, JD
Research Assistant Professor, Texas A&M University School of Public Health
10:30
- 12:00
Closing Session: Navigating HIPAA in a Geospatial World
Room: Judea Ballroom
When public health shares information with communities, it balances assuring the public good with the risk to individual privacy. This session examines how public health utilizes mapping technologies to monitor health status to identify and solve community health problems; diagnose and investigate health problems and health hazards in the community; inform, educate, and empower people about health issues, creating a space for public action; and, assist public health agencies in fulfilling the 10 Essential Public Health Services. Geographic information systems use geographic data, such as streets, blocks or neighborhood areas and attribute data, such as social determinants of health, and link the two in a map. Attendees learn about implementing privacy controls for useful and locally relevant map design.
View/download the Presentation Slides
Chief Medical Officer, Esri
Estella Geraghty, MD, MS, MPH, GISP
Chief Medical Officer, Esri
Select date to see events.