Federal regulations promulgated under HIPAA, the Health Insurance Portability and Accountability Act, will impact the legal profession. The HIPAA regulations will protect the privacy and security of health information. First, attorneys who represent entities covered under HIPAA will need to enter into Business Associate Agreements with those clients. The Agreements will impose confidentiality, privacy, and security requirements upon lawyers and law firms. Particularly troublesome will be the impact that the Agreement has upon the attorney-client relationship, including the potential loss of the attorney-client privilege and attorney work product protections. The entities that the lawyer or law firm utilize in assisting to prepare the case will also be caught in the HIPAA web. Second, all attorneys who need access to health information to support their cases, will need to modify how they seek that information from entities who are covered under HIPAA. The HIPAA regulations change how an attorney may seek health information by way of subpoena or discovery request. This paper addresses the aspects of HIPAA that apply to lawyers and law firms by and through the Business Associate Agreements.
Read full abstract