Brandon C. Ge

Counsel & CHS Director | He/Him/His

Overview

Brandon C. Ge is a counsel in Crowell & Moring’s Washington, D.C. office, where he is a member of the firm’s Privacy and Cybersecurity and Health Care groups.

Brandon advises clients on a wide range of privacy and cybersecurity laws, regulations, and standards. His practice has a particular focus on advising clients – from start-up digital health companies to large health plans – on all aspects of compliance with the Health Insurance Portability and Accountability Act (HIPAA). Brandon regularly assists clients with responding to security incidents and has successfully represented clients in Office for Civil Rights investigations.

In addition, Brandon counsels clients on a variety of other privacy and cybersecurity issues, including the General Data Protection Regulation (GDPR), the Telephone Consumer Protection Act (TCPA), and 42 CFR Part 2. Brandon has extensive experience conducting technical security evaluations of both clients and their prospective vendors. He also frequently works with companies across a variety of industries to incorporate privacy and security by design based on guidance from the FTC, state attorneys general, and NIST.  

Brandon was recognized as "Ones to Watch" for Health Care Law in the 2023 edition of The Best Lawyers in America.

During law school, Brandon was a Harlan Fiske Stone Scholar and served as an articles editor of the Columbia Science and Technology Law Review. Prior to law school, Brandon worked at a biotechnology company and volunteered at the emergency department of a not-for-profit hospital in Maryland.

Career & Education

|
    • University of Maryland, College Park, B.A., 2007
    • Columbia Law School, J.D., Harlan Fiske Stone Scholar, 2012
    • University of Maryland, College Park, B.A., 2007
    • Columbia Law School, J.D., Harlan Fiske Stone Scholar, 2012
    • District of Columbia
    • Maryland
    • District of Columbia
    • Maryland

Brandon's Insights

Client Alert | 11 min read | 01.10.25

OCR Issues Notice of Proposed Rulemaking to Modernize the HIPAA Security Rule and Strengthen Protections for Health Information

On January 6, 2025, the Department of Health and Human Services’ Office for Civil Rights (“OCR”) published a notice of proposed rulemaking (the “NPRM”) entitled HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information. In light of evolving technologies and cybersecurity threats, the NPRM aims to modernize security regulations implementing the Health Insurance Portability and Accountability Act security standards (the “HIPAA Security Rule”) and strengthen protections for the confidentiality, integrity, and availability of electronic protected health information (“ePHI”). In particular, OCR is considering modifications to the HIPAA Security Rule to address:...

Recognition

  • The Best Lawyers in America: “Ones to Watch": Health Care Law, 2023-2024; Privacy and Data Security, 2024

Brandon's Insights

Client Alert | 11 min read | 01.10.25

OCR Issues Notice of Proposed Rulemaking to Modernize the HIPAA Security Rule and Strengthen Protections for Health Information

On January 6, 2025, the Department of Health and Human Services’ Office for Civil Rights (“OCR”) published a notice of proposed rulemaking (the “NPRM”) entitled HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information. In light of evolving technologies and cybersecurity threats, the NPRM aims to modernize security regulations implementing the Health Insurance Portability and Accountability Act security standards (the “HIPAA Security Rule”) and strengthen protections for the confidentiality, integrity, and availability of electronic protected health information (“ePHI”). In particular, OCR is considering modifications to the HIPAA Security Rule to address:...

|

Brandon's Insights

Client Alert | 11 min read | 01.10.25

OCR Issues Notice of Proposed Rulemaking to Modernize the HIPAA Security Rule and Strengthen Protections for Health Information

On January 6, 2025, the Department of Health and Human Services’ Office for Civil Rights (“OCR”) published a notice of proposed rulemaking (the “NPRM”) entitled HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information. In light of evolving technologies and cybersecurity threats, the NPRM aims to modernize security regulations implementing the Health Insurance Portability and Accountability Act security standards (the “HIPAA Security Rule”) and strengthen protections for the confidentiality, integrity, and availability of electronic protected health information (“ePHI”). In particular, OCR is considering modifications to the HIPAA Security Rule to address:...