Sign-up for a law firm subscription plan and each attorney in the firm receives free access to all CLE Programs
What Will You Learn
How medical records are treated and transferred in healthcare transactions; how HIPAA, state privacy laws, and emerging consumer health data statutes apply in transactional contexts; how privacy and cybersecurity risks affect valuation, deal structure, and successor liability; and how regulatory scrutiny and breach history influence diligence and post-closing integration.
What Will You Gain
A practical framework for structuring compliant record transfers, conducting focused privacy and cybersecurity diligence, allocating risk in transaction documents, and advising clients on managing regulatory exposure throughout the lifecycle of a healthcare transaction.
Key topics to be discussed:
Date / Time: March 25, 2026
Closed-captioning available
Monica R. Chmielewski, Partner | Foley & Lardner
Monica R. Chmielewski is a partner at Foley & Lardner LLP and vice chair of the firm’s Health Care Practice Group. She concentrates her practice exclusively on health care and life sciences matters, representing health systems, hospitals, academic medical centers, pharmaceutical, biotech, and medical device companies, as well as pharmacies. Monica advises clients across the full life cycle of medical research, development, and commercialization, including regulatory compliance, clinical trials (including decentralized trials), FDA submissions, manufacturing, supply chain matters, and complex health care transactions.
Melissa K. Bianchi, Partner | Hogan Lovells
Melissa K. Bianchi is a partner in the Washington, D.C. office of Hogan Lovells and leads the firm’s digital health initiative. She brings a cross-disciplinary approach to digital health products, including mobile applications, wearable technologies, and other health IT solutions. Well versed in health privacy law, she advises pharmaceutical and biotechnology companies, health plans, hospitals, and academic medical centers on complex health data issues arising under the Health Insurance Portability and Accountability Act (HIPAA) and other U.S. privacy and regulatory frameworks. Her practice spans digital health innovation, clinical research compliance, health information exchange, and prescription drug coverage issues under Medicare Part D, Medicaid expansion, and broader health reform initiatives.
Khaled Mowad, Counsel | Hogan Lovells
Khaled Mowad is counsel in the New York office of Hogan Lovells, where he advises clients across industries — including technology, health care, sports, media, and financial services — on the legal, regulatory, and commercial issues surrounding data, innovation, and risk. Drawing on deep experience with U.S. federal and state privacy and consumer protection laws, including HIPAA, the California Consumer Privacy Act (CCPA), the FTC Act, the General Data Protection Regulation (GDPR), and the Gramm-Leach-Bliley Act (GLBA), he helps organizations navigate complex compliance obligations, structure data-sharing arrangements, and negotiate commercial agreements involving sensitive information and emerging technologies. His practice frequently involves high-stakes business partnerships, mergers and acquisitions, strategic procurement, and large-scale data transactions, particularly in highly regulated sectors such as health care.
I. Transfer and Treatment of Medical Records in Healthcare Transactions | 1:00pm – 2:00pm
This session will review and discuss legal and regulatory considerations associated with the transfer of medical records and information in various healthcare transactions, including mergers, affiliations, joint ventures, and asset sales. We will examine, in relation to specific transaction structures, the different models of record transfer and the regulatory and compliance considerations associated with each, including the applicability and interplay of HIPAA and state privacy and records retention laws, as well as patient access rights and issues related to record valuation.
In addition, the session will address practical compliance planning and risk mitigation considerations that arise when health information changes custody or control. Participants will explore how transaction structure impacts data ownership, custodianship, and ongoing compliance obligations; how to allocate responsibility for legacy records, electronic health record (EHR) systems, and archived data; and how to anticipate and manage continuing regulatory obligations following closing. The discussion will also consider emerging issues involving digital health platforms, decentralized record systems, and cross-state data transfers, providing attendees with actionable guidance for structuring compliant record transfer frameworks in complex healthcare transactions.
Break | 2:00pm – 2:10pm
II. Data Risk and Regulatory Scrutiny in Healthcare M&A: Diligence, Deal Structure, and Successor Liability | 2:10pm – 3:10pm
Healthcare transactions present uniquely complex data protection and privacy challenges that extend well beyond traditional deal diligence. In addition to evaluating financial and operational risk, buyers and sellers must assess compliance with the Health Insurance Portability and Accountability Act (HIPAA), evolving consumer health data statutes, and heightened regulatory scrutiny from agencies including the FTC, attorneys general, and U.S. Department of Health and Human Services (HHS).
This session will examine how medical records, patient data flows, AI-enabled tools, vendor ecosystems, and breach history impact valuation, deal structure, representations and warranties, and post-closing integration. The session will provide practical guidance on current market standards for allocating risk, conducting effective diligence, and avoiding successor liability in healthcare M&A. Specific topics to be covered include the impact of consumer health privacy laws, data breach and ransomware considerations, medical record transfer considerations, data protection considerations related to transition services arrangements.
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
Approved for CLE Credits
2 General
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
No MCLE Required
2 CLE Hour(s)
Pending CLE Approval
2 General
Approved via Attorney Submission
2.5 General Hours
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Pending CLE Approval
2 General
Pending CLE Approval
2 General
Pending CLE Approval
2 General
Pending CLE Approval
2 Substantive
Pending CLE Approval
2 General
Pending CLE Approval
2 General
No MCLE Required
2 CLE Hour(s)
No MCLE Required
2 CLE Hour(s)
Pending CLE Approval
2 General
No MCLE Required
2 CLE Hour(s)
Pending CLE Approval
2 General
Approved for CLE Credits
2.4 General
Pending CLE Approval
2 General
Pending CLE Approval
2 General
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Approved for CLE Credits
120 General minutes
Approved for CLE Credits
2.4 General
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Approved for CLE Credits
2.4 General
Pending CLE Approval
2 General
Pending CLE Approval
2.5 General
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
Pending CLE Approval
2.5 General
Pending CLE Approval
2 General
No MCLE Required
2 CLE Hour(s)
Pending CLE Approval
2 General
Approved for CLE Credits
2 General
Pending CLE Approval
2 General
Not Eligible
2 General Hours
Approved for CLE Credits
2 General
Approved via Attorney Submission
2 Law & Legal Hours
Pending CLE Approval
2 General
Pending CLE Approval
2.4 General
Pending CLE Approval
2 General
only $395 yearly
only $395 yearly