Pulse Center for Patient Safety Education & Advocacy program, Understanding Individuals’ Rights Under the HIPAA Privacy Rule is approved for 1.0 CE in Ethics by the Patient Advocate Certification Board to satisfy the requirements for Board Certified Patient Advocates (BCPA) through January 28th, 2025.


About The Speakers

As Research Compliance Director for the MedStar Health Research Institute (MHRI), Wendy McAtee manages the implementation of research compliance programs and serves as the research privacy liaison across all MedStar facilities. Wendy collaborates with research stakeholders on research compliance matters and stays current on research regulations, laws and guidance documentation.

Wendy has experience in performing research billing compliance audits, conflict of interest reviews, development of management plans, creating research compliance educational programs, as well as conducting regulatory routine or for-cause audits. 

Wendy received a Bachelor of Science in Health Science from Clemson University. She enjoys spending time with family, friends and being outdoors with her two bichon frise puppies.


About The Speakers

Cathleen G. Cachero joined the U.S. Department of Health and Human Services, Office for Civil Rights (HHS/OCR) as an Equal Opportunity Specialist (EOS) in 2005. Since then, Cathleen has worked on a variety of Civil Rights and Privacy/Security Rule investigations, including compliance reviews of reported breaches of unsecured protected health information. She is responsible for ensuring compliance with the HIPAA Privacy, Security, and Breach Notification Rules, and also enforces Federal Civil Rights laws which prohibit discrimination in the delivery of health and human services on the basis of race, color, national origin, disability, age, sex, religion and the exercise of conscience. Cathleen received a B.A. from the University of Pennsylvania in 1994, a J.D. from Boston University School of Law in 1997 and an M.P.H. from Boston University School of Public Health in 1998. Prior to joining OCR, Cathleen practiced regulatory and corporate transactional health law at two national law firms.

About the Presentation

Understanding Individuals' Rights Under The HIPAA Privacy Rule


3 Objectives:

  • Provide an overview of the HIPAA Privacy Rule – Who is regulated, what information is protected, and how regulated entities may (and may not) use or disclose such information (including the conditions under which a health care provider may communicate with a patient’s family, friends or others involved in the patient’s care)
  • Describe the rights individuals may exercise under the HIPAA Privacy Rule, such as obtaining a copy of medical records, requesting the amendment of health information that is incorrect or incomplete, or requesting that a health care provider or health plan not make certain disclosures that they are otherwise permitted to make
  • Describe when regulated entities must notify individuals that there has been an impermissible disclosure (breach) of their information, and what information such entities must provide to the individuals



Payment