Photo of Brandon C. Ge

Brandon C. Ge is a counsel in Crowell & Moring’s Washington, D.C. office, where he is a member of the firm’s Privacy and Cybersecurity and Health Care groups.

Brandon advises clients on a wide range of privacy and cybersecurity laws, regulations, and standards. His practice has a particular focus on advising clients – from start-up digital health companies to large health plans – on all aspects of compliance with the Health Insurance Portability and Accountability Act (HIPAA). Brandon regularly assists clients with responding to security incidents and has successfully represented clients in Office for Civil Rights investigations.

On February 8, 2024, the Centers for Medicare & Medicaid Services (CMS) issued a quality standard memorandum (Memorandum) clarifying that hospitals and critical access hospitals (CAHs) may transmit patient information and orders via text message under certain conditions. Although Computerized Provider Order Entry (CPOE) continues to be the preferred method of order entry, healthcare team members are permitted to share patient information and orders among themselves through a Health Insurance Portability and Accountability Act of 1996 (HIPAA)-compliant secure texting platform (STP) in accordance with Medicare and Medicaid Conditions of Participation (CoPs). The Memorandum reverses CMS’s position in a January 2018 memorandum and is effective immediately.Continue Reading CMS Issues Guidance on HIPAA-Compliant Secure Texting Platforms

The Federal Trade Commission (“FTC”) has taken a number of actions this year against healthcare apps based on data practices that FTC alleges are a violation of federal law. The latest enforcement action, on May 17, 2023, is against Easy Healthcare Corporation (“Easy Healthcare”), which operates the Premom ovulation tracker application (“Premom”), for allegedly violating