Tovino, Stacey A.2014-01-132014-01-132013-05-2191 Or. L. Rev. 813 (2013)0196-2043https://hdl.handle.net/1794/1359556 pagesOutside health care counsel frequently obtain medical records, billing records, health insurance claims records, and other records containing individually identifiable health information in the course of representing health industry clients in medical malpractice, licensure, certification, accreditation, fraud and abuse, peer review, and other civil, criminal, and administrative health law matters. This Article is the first to argue that state rules of professional conduct, not federal health information confidentiality regulations, should govern outside health care counsel’s use and disclosure of confidential client information, and that outside counsel should be excepted from direct federal regulation under the HIPAA Privacy Rule.en-USAll Rights Reserved.Health care reformPrivacyArticle