HIPAA, Legal Holds, and PHI: Rachel Rose, J.D., M.B.A. With Sean McKenna, J.D., B.A.

Why This Topic Matters

Healthcare organizations must balance preservation of records with privacy requirements when litigation, audits, or investigations arise. The article highlights why policies, procedures, and technology matter for safeguarding protected health information and avoiding problems tied to handling, transmission, retention, and disclosure.

Article Sections

1. Background

   The speakers introduce their professional backgrounds and areas of healthcare enforcement and regulatory experience.

2. Legal holds and information preservation

   This section covers the general concept of legal holds, the types of information that may need to be preserved, and the settings in which preservation duties can arise.

3. Retention period and preservation obligations

   This section discusses how preservation timeframes relate to litigation, audits, investigations, and overlapping legal obligations involving records retention.

4. Policies, procedures, and technology

   This section addresses the operational importance of having appropriate compliance processes and tools in place to support preservation responsibilities.

5. Redaction, confidentiality, and public access

   This section discusses handling sensitive information during litigation, including privacy protections, confidentiality measures, and court-related review processes.

6. Recommendations for entities handling PHI

   This section offers general advice for organizations, vendors, and counsel that create, receive, maintain, or transmit protected health information.