John Fisher counsels health care organizations and related businesses on complex privacy, security, and regulatory compliance matters involving protected health information. He advises hospitals, clinics, physician groups, long-term care providers, health plans, and business associates on the development and implementation of compliance strategies under HIPAA and applicable federal and state privacy laws.
John’s HIPAA practice includes advising clients regarding the Privacy Rule, Security Rule, and Breach Notification Rule; preparing and reviewing policies, procedures, notices, authorizations, and business associate agreements; and assisting with risk assessments, incident response, breach determinations, documentation, and workforce training.
Mr. Fisher also assists clients in responding to inquiries and investigations by the Office for Civil Rights, including the evaluation of complaints, preparation of agency responses, and development of corrective action measures.
John also advises clients on Wisconsin patient privacy and health care records requirements, including confidentiality obligations, patient access rights, permissible disclosures, patient authorization issues, and the interplay between HIPAA and Wisconsin laws that may impose additional or more protective standards. His counsel is grounded in practical risk management, clear documentation, effective vendor oversight, and compliance frameworks that support responsible information sharing while mitigating legal and operational exposure.
Representative Services
- Advising on HIPAA Privacy Rule, Security Rule, and Breach Notification Rule compliance
- Developing and reviewing privacy and security policies, procedures, notices, authorizations, and consent forms
- Drafting, negotiating, and evaluating business associate agreements and vendor privacy provisions
- Conducting privacy and security risk assessments and advising on mitigation strategies
- Assisting with incident response, breach analysis, notification obligations, and documentation
- Responding to Office for Civil Rights inquiries, complaints, investigations, and corrective action requests
- Counseling on Wisconsin patient privacy laws, health care records requirements, access rights, and permissible disclosures
- Providing workforce training, compliance program support, and guidance on responsible information sharing
