Authored Articles & Publications Jun 29, 2021
Ransomware Prevention and Response Tips for Public Agencies
As Cities, Utilities and Others Increasingly Become Targeted, Privacy & Cybersecurity Partner Leeann Habte Gives Guidance in PublicCEO
At a Glance
Leeann advises clients on information privacy and security, health care regulatory compliance, and Medicare and Medicaid reimbursement issues.
Leeann has practical experience, having served as an associate director at the UCLA Center for Health Policy Research and research director at the Minnesota Department of Health.
Leeann is a recognized leader in health data privacy and security and health information technology legal issues.
Leeann Habte counsels clients on information privacy and security programs, health care regulatory compliance, and Medicare and Medicaid reimbursement issues. She represents health plans, hospitals, physicians, pharmacies, medical device companies, health information exchanges, digital health companies, and other public and private organizations on a broad range of legal issues.
Leeann applies her practical and legal experience to help clients find real-world business solutions to complex legal and regulatory issues.
Privacy and Security
A Certified Information Privacy Professional, Leeann advises organizations that handle health care, personal or educational data on security incident response, security breach notification, security risk assessments, privacy and security policies and procedures, vendor management practices, business associate agreements, website privacy policies, training, and related issues. She is highly experienced in counseling clients on the interaction of state and federal law, including the Health Insurance Portability and Accountability Act, the Confidentiality of Alcohol and Drug Abuse Treatment Records (42 CFR Part 2), the Federal Trade Commission Act, the Family Educational Rights and Privacy Act, employer-focused laws, and state laws regarding sensitive information (Lanterman-Petris-Short Act, Board of Pharmacy rules). She has advised on complex data-sharing arrangements related to clinical integration, clinical research, telemedicine, health information exchange, electronic health records systems, medical/mobile devices, and on emerging privacy and security risks.
Health Care Compliance
Leeann counsels clients on fraud and abuse compliance; licensing, certification and change of ownership; provider enrollment; credentialing; Knox-Keene Act and Medi-Cal managed care compliance; governance; medical staff issues and informed consent policies.
Reimbursement
Leeann advises clients on Medicaid and Medicare reimbursement issues, including Medi-Cal rate appeals and audits, Medicaid waiver issues, reimbursement rules, medical necessity determinations, billing issues, utilization review and bankruptcy issues. She is actively involved in Medicaid waiver program implementation.
Digital Health
Leeann provides strategic counseling to emerging medical device and digital health companies on privacy and security, fraud and abuse, and regulatory issues (including Food and Drug Administration clearance). She handles clinical research agreements and supply chain contracting, and coordinates health regulatory, business and intellectual property advice.
Prior Experience
Prior to joining Best Best & Krieger LLP as a partner, Leeann was a senior counsel at Foley & Lardner LLP, a law firm with a nationally recognized health care practice. She also has years of practical experience, having served as an associate director at the UCLA Center for Health Policy Research and research director at the Minnesota Department of Health prior to becoming an attorney. In those positions, she was responsible for HIPAA and data security, data-sharing and compliance issues. She also led initiatives and developed regulations on health quality, administrative simplification, charity care, rural hospital and primary care center issues.
A native of Minnesota, Leeann obtained her master’s degree in communications from the University of Minnesota. She has worked in the health care field for more than 20 years, having begun in public relations, transitioned to health policy, and then to a legal career. She attended and ranked highly in Loyola Law School’s evening program for professionals while working full-time at UCLA. She is a devoted mother, a world traveler, and a Tai Chi practitioner.
Education
- Loyola Law School, Los Angeles
- University of Minnesota, Minneapolis, MN, M.S.
- St. Cloud State University, St. Cloud, MN, B.S.
Admissions
- California
Memberships
- American Health Lawyers Association, Digital Health Affinity Group Chair, 2021
- California Society for Health Care Attorneys
- Health Care Compliance Association, Southern California Conference Planning Committee Member, 2021
- International Association of Privacy Professionals
- Los Angeles County Bar Association, Health Law Section Executive Committee Member, 2021
Awards
- Top Health Care Lawyer, Daily Journal, 2021
- Woman of Influence: Health Care, Los Angeles Business Journal, 2021
- The Best Lawyers in America®, Health Care Law, 2021–2023
Authored Articles & Publications Jun 24, 2021
Best in Law: Ransomware Attack
Privacy & Cybersecurity Attorneys Glen Price and Leeann Habte Give Ransomware Tips for Businesses
Legal Alerts Jul 14, 2020
CCPA Enforcement Begins as AG Proposes Rules
Final Regulations to Help Businesses Comply with California Consumer Privacy Act; Ballot Measure Could Expand Privacy Protections
Legal Alerts Aug 13, 2018
Public Agencies and GDPR Compliance
Government Entities Should Evaluate Data Collection and Use Practices
Legal Alerts Jan 24, 2017
Final Rule Issued on Confidentiality of Substance Use Disorder Patient Records
Trump Rule Freeze May Put it on Hold
-
“Transitioning of Behavioral Health Data Sharing and Information Exchange: A Structured Approach to Decision Making,” Information Briefing, AHLA, April 2021
- "Health Data Defense: Understanding Security Standards and Certifications," AHLA Connections, Oct. 2021
- "Convener on Artificial Intelligence and Health Law: Designing a Trusted Framework for the Application of AI in Health Care," American Health Lawyers Association, Nov. 2020
- “Transitioning of Behavioral Health Data Sharing and Information Exchange: A Structured Approach to Decision Making” AHLA Briefing, April 2021
- "Artificial Intelligence in Health Care: Welcome to the Machine," AHLA Connections, June 2018
- “Federal and State Data Privacy Laws and Their Implications for the Creation and Use of Health Information Databases,” Big Data: A Business and Legal Guide, CRC Press, 2015
- “What is the Meaning of Meaningful Use? How to Decode the Opportunities and Risks in Health Information Technology,” Business Law News, July 13, 2015
- “The Big Data Dilemma: Compliance for the Health Professional in an Increasingly Data-Driven World,” Journal of Healthcare Compliance, June 2015
- “Deconstructing Cyberinsurance Coverage: Lessons From the Travelers Case,” AHLA HIT Practice Group E-alert, June 15, 2015
- “Medicare Penalties and Bonuses for Meaningful Use of EHRs Revamped as Part of the ‘Doc Fix’ Bill,” AHLA HIT Practice Group E-alert, June 8, 2015
- “Privacy Laws Impose Key Restrictions,” Executive Insight, April 20, 2015
- “Tapping Into the Big Value of Health Care Big Data,” Foley White Paper, Feb. 27, 2015
- “OIG 2015 Work Plan, Part 2: Do Fewer Projects Mean a Sharper Focus?” Compliance Today, Feb. 2, 2015.
- “Genetic Information Privacy: A Complex Regulatory Framework,” Bloomberg BNA: Medical Research Law & Policy Report, Jan. 7, 2015
- “Federal and State Privacy Laws: Strategies for Analysis of Big Data in Healthcare,” Healthcare Informatics, Dec.5, 2014
- “Privacy Issues in the Sharing of Genetic Information,” Foley White Paper, Sept.18, 2014
- “A Proactive Approach to Cloud Computing in the Health Care Industry,” AHLA Connections, June 1, 2013
- “Minnesota AG Reaches First Settlement With Business Associate Under HITECH Act,” Bloomberg BNA's Health IT Law & Industry Report, Aug. 20, 2012
- “HHS Imposes First Civil Penalty and Resolution Agreement Resulting from HITECH Breach Notification Rule,” Managed Care Outlook, April 15, 2012
- “DMEPOS Supplier Marketing Arrangements and HIPAA Compliance,” Compliance Today, Sept. 1, 2011
