Philip R. Davis

About Philip

Phil Davis is a health care technology attorney who advises health care organizations on the complex legal, regulatory and operational challenges that drive today's technology and cybersecurity decisions.

Drawing on more than a decade of experience as a health care information security leader, including serving as Chief Information Security Officer for a large nonprofit health system, Phil provides practical, operational guidance that helps clients manage risk, respond to evolving threats and support strategic technology initiatives.

Phil's practice includes:

• Advising on HIPAA and HITECH compliance, privacy program development and regulatory requirements;
• Counseling clients on cybersecurity incidents, data breaches, government investigations and incident response;
• Advising on artificial intelligence governance, including the legal, privacy and security considerations of deploying AI tools in health care settings;
• Negotiating and drafting technology, software and vendor agreements, including complex IT procurement contracts; and
• Conducting HIPAA risk analyses, evaluating technology, website and marketing practices and advising on broader information security and privacy compliance matters.

Phil is known for his practical, business-minded approach and his ability to translate complex technical and regulatory issues into actionable guidance. He holds CISSP, CIPP/US and CHC certifications and is a frequent speaker on health care privacy, cybersecurity, artificial intelligence and information security topics.