Welcome: Keynote: Information Governance for the Healthcare Industry: A Combined Approach. Stephen B. Bonner, 72

Transcription

1 Welcome: Stephen B. Bonner, 72 Stephen Bonner recently received the Mitchell Hamline School of Law Outstanding Alumni Award for his commitment to the school, his financial support of programs for students, and his service on the board of trustees. Bonner graduated from William Mitchell in 1972 and spent most of his career as the president and CEO of Cancer Treatment Centers of America, also serving on the company s board as chairman for several years. He retired in 2015 and is currently Entrepreneur-in- Residence at Harvard Business School. Keynote: Information Governance for the Healthcare Industry: A Combined Approach Jacki Monson, 09, VP, Chief Privacy and Information Security Officer Sutter Health Jacki Monson has worked in healthcare for fifteen years. For the last thirteen years, Jacki has focused primarily on compliance, privacy, and information security. Currently, Jacki is the Vice President, Chief Privacy and Information Security Officer for Sutter Health where she provides direction and oversight for all facets of the privacy and information security program. Prior to this, Jacki served in Chief Privacy Officer roles at Sutter Health and Mayo Clinic. Prior to Mayo, Jacki worked for a Pharmacy Benefit Management and Mail Order Pharmacy Company and an independent Children s Hospital in compliance, privacy and information security roles. Jacki is considered a subject matter expert and leader in compliance, privacy and information security. Jacki served as a member of HHS s Health Care Industry Cybersecurity Task Force. She was appointed by the DHHS Secretary to the National Committee on Vital and Health Statistics where she is serving a three year term. She has testified before government and legislative committees, authored numerous articles and is a frequent national speaker on these subjects. Jacki has a Juris Doctor from Mitchell Hamline School of Law. She holds certifications in health care law, privacy and compliance. She has a BA from The College of Saint Scholastica in Psychology.

2 Panel 1: Building and Maturing Cybersecurity and Privacy Programs Moderator: Bruce Lach, President SUCCESS Computer Consulting, Inc. Bruce Lach has nearly 40 years of IT and General Management experience. During his first 20 years, he spent time in corporate America with IT stints at Twin City Federal, General Mills and Land O Lakes, with a short stop at a major industrial manufacturer in Indiana. During this time, Bruce s IT experience included managing every department in a typical large enterprise IT organization, from communications to system programmers to software development. In the mid-90 s, Bruce s experience switched to leading start-up and small businesses; in some cases those small businesses served big businesses and in others, serving other small businesses. In the decade leading up to joining SUCCESS, Bruce s focus was on working directly with more than 100 small business owners in improving the profitability of their companies, which in some cases involved survival of companies during the great recession of 2008 & Looking for an IT partner to support his clients, Bruce was introduced to Erik Thorsell and SUCCESS, eventually leading to Bruce joining the SUCCESS team in April of 2013 as President. Cory Fitzpatrick, Privacy Officer Children s Hospitals and Clinics Cory Fitzpatrick has been with Children's Minnesota since November, He previously worked for Medica Health Plans for 7 years, serving most recently as Manager of Compliance and Privacy. Prior to that, he worked for a small provider sponsored health plan in South Dakota. Cory received his Juris Doctor from William Mitchell College of Law and his MBA and BS in health administration from the University of South Dakota. Eran Kahana, 96, Attorney and Senior Fellow at Standford University Law School; Counsel Maslon LLP Eran Kahana is a cybersecurity and intellectual property lawyer as well as a Fellow at Stanford Law School. He counsels clients on a wide variety of matters related to cybersecurity, technology law, trademarks, patents, and copyright issues. Eran also serves in a variety of cybersecurity thought-leadership roles and works closely with the FBI, Department of Justice, Secret Service, and colleagues from the private and academic sectors to set, promote, and sustain cybersecurity best practices. Eran serves as both general counsel and as a director on the Executive Board of InfraGard (MN Chapter). At Stanford Law School, Eran writes and lectures on the intersect between law and artificial intelligence and is a frequent speaker at Stanford's annual E-Commerce Best Practices Conference. He has been interviewed on

3 cybersecurity, privacy, and technology law at Bloomberg Law, BBC, KABC radio, Minnesota Public Radio, Twin Cities Business, TheStreet.com, and Stanford University Radio, KZSU FM. Elimu Kajunju, 05, Senior Director/Senior Privacy Counsel McKesson Corporation Elimu Kajunju is the Senior Director for Privacy Innovation and International Compliance and Senior Privacy Counsel at McKesson Corporation. He is responsible for developing and maintaining enterprise programs around privacy by design, de-identification, data lifecycle, web/mobile/cloud/big data privacy, privacy notices, international privacy compliance (Canada and the EU) and workplace privacy and providing privacy legal counsel to McKesson businesses and enterprise functions. Prior to McKesson, he has held similar positions at UnitedHealthcare Military & Veterans, Boston Scientific and Carlson Companies. In addition to a bachelor degree in business from St. Mary s University of MN and a Juris Doctor from Hamline University School of Law, Elimu possesses the following privacy and security certifications: CIPP (Certified Information Privacy Professional - CIPP/US, CIPP/G, CIPP/C, CIPP/EU), CIPT (Certified Information Privacy Technologist), CIPM (Certified Information Privacy Manager), CISSP (Certified Information Systems Security Professional) and CISSP- ISSAP (Information Systems Security Architecture Professional). Morgan Schacht, 13, Compliance/Privacy Officer Mayo Clinic Health System In Morgan s role at Mayo Clinic, she oversees compliance initiatives for the Southwest Minnesota Region of the Mayo Clinic Health System. She conducts compliance risk assessments and leadership reporting, investigates internal and external compliance complaints, and participates on the Institutional Review Board (IRB). Prior to her Compliance/Privacy Officer role, Morgan worked as a Senior Privacy Analyst at Mayo Clinic in Rochester, where she led business associate initiatives and worked with various business groups to develop privacy-compliant policies and procedures. She also completed a district court judicial clerkship for the honorable Christina K. Stevens. Morgan has a Juris Doctor from Hamline University School of Law and has earned healthcare law and compliance certificates. Jamie Wolbeck, Vice President of Technical Operations SUCCESS Computer Consulting, Inc. Joining the team in 2006 as a Network Technician, Jamie advanced quickly into his present day role. Working in the IT industry since 2000, Jamie combines a passion for technology and wide-ranging experience from network engineering, voice networking, point of sale to security and compliance. He currently oversees all Technical Operations at SUCCESS, including working directly with the security team on HIPAA and PCI assessments.

4 Panel 2: Complying with International Cybersecurity and Privacy Regulatory Requirements Moderator: Charlotte Tschider, 15, Affiliated Professor Mitchell Hamline School of Law Charlotte Tschider is owner and principal of Cybersimple Security, which provides privacy and security consulting services for small to large businesses. She is also a member of the International Association of Privacy Professionals (IAPP) Training Advisory Board, reviewing international professional privacy educational books and training materials. Tschider was most recently director of information security management for Carlson Wagonlit Travel (of Carlson Companies) and has led information technology teams and served as a privacy liaison in various industries for 15 years, most notably at Target Corporation leading security incident response, risk management, and risk governance. Tschider has previously taught at the University of Minnesota. She earned a Juris Doctor from Hamline University School of Law, an M.A. in rhetoric and scientific and technical communication from the University of Minnesota, and a B.S. in scientific and technical communication from the University of Minnesota. Tschider writes and presents on a variety of topics involving the intersection of law and technology, and she holds industry certifications in IAPP s Certified Information Privacy Professional (CIPP/US, CIPP/E) and ISC2 s Certified Information Systems Security Professional (CISSP). Jesse Berg, Attorney Gray Plant Mooty Jesse Berg is a partner at Gray Plant Mooty in Minneapolis. Jesse counsels healthcare providers on federal and state anti-kickback laws, the Stark physician self-referral law, Medicare and Medicaid reimbursement, enrollment and participation issues, HIPAA and state privacy and confidentiality matters, as well as federal and state antitrust issues. Jesse provides legal guidance to a variety of different types of healthcare providers, including public and private hospitals, physician groups of various sizes and specialties, and ancillary service providers, such as imaging facilities and ambulatory surgery centers. Prior to joining Gray Plant Mooty, Jesse served as assistant attorney general in the Health Care and Antitrust Division of the Minnesota Attorney General's Office.

5 Robert E. Cattanach, Partner Dorsey & Whitney, LLP His technical background enables him to understand the complex business challenges associated with today s cyber world, and provide the strategic acumen to achieve success. Bob s long history of interaction with key government agencies began with his service of the United States Department of Justice, Civil Division, which represents the interests of the United States and its agencies in matters of national security. Bob s decades of experience as a trial lawyer also enable his clients to achieve their business objectives if other means of resolution cannot be achieved. Bob has an active trial docket in courts around the country, where his innovative thinking, collaborative client approach, and keen strategic insights have provided his clients with a long string of successful verdicts and appeals. Bob has represented numerous clients in breach responses, development of privacy policies and procedures, and provided counsel to corporate Boards of Directors and Audit Committees on matters of cybersecurity, privacy and internal governance. Bob is also a much-sought-after commentator and contributor to professional and journalistic coverage of cybersecurity issues, ranging from the New York Times and USA Today to numerous television media and the Sedona Conference Working Group 11 on cyber matters. Joe Cuffel, Director of Privacy and Engagement Concord USA Joe is the Director of Privacy and Engagement at Concord, a consulting firm focusing on data, such as data experience, data analytics, data at rest, data in motion and data privacy and protection. He has over ten years of operational experience in privacy and security to include leading a privacy team at Target through the breach in During his time at Target he was tasked with evaluating and identifying unique privacy solutions to enable emerging technologies. Prior to that Joe served in the Marine Corps where he deployed two times to Iraq (Fallujah-2005, Trebil-2008). Through this experience, he has built a career around finding creative and practical ways to implement privacy/security controls that balance compliance with profit. Joe has a BA in Biology, Masters of Science in Management (MSM), and is a Certified HealthCare Information Security and Privacy Practitioner (HCISPP) and Certified Information Privacy Professional (CIPP).

6 Mark Lanterman, Founder and Chief Technology Officer Computer Forensic Services Mark Lanterman is the Chief Technology Officer of Computer Forensic Services. Before entering the private sector, Mark was a member of the U. S. Secret Service Electronic Crimes Taskforce. Mark has 28 years of security and forensic experience and has testified in over 2000 cases. He is an adjunct instructor for the University of Minnesota M.S. Security Technologies program and the National Judicial College in Reno, Nevada. Mark has also conducted training for the Federal Judiciary through the Federal Judicial Center in Washington, D.C. Patrick Midden, 06, Owner Bastion Consulting, Inc. Pat Midden started his career as an IT professional, designing, implementing and supporting secure systems in the insurance and financial industries. Later, as a practicing attorney, he provided legal guidance on privacy and security requirements to clients across industries, including healthcare, financial, and education. Pat has previously served as Privacy Officer for Prime Therapeutics and most recently as Vice President of Compliance for Redbrick Health, designing Medicare and Medicaid compliance programs, overseeing the HIPAA privacy and security program, and performing a key role on the Governance, Risk and Compliance committee. Currently, he acts as consultant to help companies develop and maintain privacy and security programs. He holds a BS from the University of Notre Dame, an MBA from the Carlson School of Management at the University of Minnesota, and a Juris Doctor from the William Mitchell School of Law.