In this episode, I get to speak with Liz Heddleston and Leah Stiegler of Woods Rogers about a healthcare compliance issue that many organizations may be underestimating: the HIPAA risks created by modern marketing practices.
Healthcare providers increasingly rely on social media, patient testimonials, online success stories, influencers, user-generated content, and even AI-assisted marketing tools to build visibility and connect with patients. But as recent enforcement activity demonstrates, these efforts can create significant HIPAA exposure when protected health information is disclosed without proper authorization.
Our conversation uses the recent OCR enforcement action involving Cadia Healthcare Facilities as a starting point. OCR alleged that patient names, photographs, and treatment information were publicly shared through online success stories without valid written HIPAA authorizations. The resulting settlement serves as a reminder that positive intent, patient enthusiasm, and informal consent do not eliminate HIPAA obligations.
Liz and Leah help unpack what went wrong in the Cadia matter and explain why healthcare organizations should be paying close attention. We discuss:
- Common misconceptions about de-identification
- The growing risks associated with social media and AI-generated content
- The compliance challenges created by marketing vendors, agencies, and influencers
- Where OCR enforcement may be headed next
One of the key themes throughout the discussion is that HIPAA compliance is no longer just an IT or cybersecurity issue. As healthcare organizations expand their digital presence, privacy compliance must become part of the content creation and marketing process itself.
Whether you're a healthcare executive, compliance officer, in-house counsel, privacy professional, marketer, or outside advisor, this conversation offers practical guidance on navigating the intersection of healthcare privacy, digital marketing, and regulatory risk.
Jump in to hear Liz and Leah's insights on HIPAA compliance, healthcare marketing, and the emerging risks organizations should be addressing before an enforcement action brings them into focus.
______________________________________
Thanks for listening!
If you like what you hear please give us a rating. You'd be amazed at how much that helps.
If you have questions for Tom or would like to participate, you can reach him at Editor@LitigationConferences.com.
Ask him about creating this kind of content for your firm -- podcasts, webinars, blogs, articles, papers, and more.
HIPAA Meets Social Media Marketing with Liz Heddleston and Leah Stiegler
42:47