Philip R. Davis

About Philip

Phil Davis is a health care privacy, cybersecurity and technology attorney who advises health care organizations on the complex legal, regulatory and operational challenges that drive today's technology and cybersecurity decisions.

Drawing on more than a decade of experience as a health care information security leader, including serving as Chief Information Security Officer for a large nonprofit health system, Phil provides practical, operational guidance that helps clients manage risk, respond to evolving threats and support strategic technology initiatives.

Phil's practice includes:

• Advising on HIPAA and HITECH compliance, privacy program development and regulatory requirements;
• Counseling clients on cybersecurity incidents, data breaches, government investigations and incident response;
• Advising on artificial intelligence governance, including the legal, privacy and security considerations of deploying AI tools in health care settings;
• Negotiating and drafting technology, software and vendor agreements, including complex IT procurement contracts; and
• Conducting HIPAA risk analyses, evaluating technology, website and marketing practices and advising on broader information security and privacy compliance matters.

Phil is known for his practical, business-minded approach and his ability to translate complex technical and regulatory issues into actionable guidance. He holds CISSP, CIPP/US and CHC certifications and is a frequent speaker on health care privacy, cybersecurity, artificial intelligence and information security topics.