Brandon C. Ge

Counsel & CHS Director | He/Him/His

Overview

Brandon C. Ge is a counsel in Crowell & Moring’s Washington, D.C. office, where he is a member of the firm’s Privacy and Cybersecurity and Health Care groups.

Brandon advises clients on a wide range of privacy and cybersecurity laws, regulations, and standards. His practice has a particular focus on advising clients – from start-up digital health companies to large health plans – on all aspects of compliance with the Health Insurance Portability and Accountability Act (HIPAA). Brandon regularly assists clients with responding to security incidents and has successfully represented clients in Office for Civil Rights investigations.

In addition, Brandon counsels clients on a variety of other privacy and cybersecurity issues, including the General Data Protection Regulation (GDPR), the Telephone Consumer Protection Act (TCPA), and 42 CFR Part 2. Brandon has extensive experience conducting technical security evaluations of both clients and their prospective vendors. He also frequently works with companies across a variety of industries to incorporate privacy and security by design based on guidance from the FTC, state attorneys general, and NIST.  

Brandon was recognized as "Ones to Watch" for Health Care Law in the 2023 edition of The Best Lawyers in America.

During law school, Brandon was a Harlan Fiske Stone Scholar and served as an articles editor of the Columbia Science and Technology Law Review. Prior to law school, Brandon worked at a biotechnology company and volunteered at the emergency department of a not-for-profit hospital in Maryland.

Career & Education

|
    • University of Maryland, College Park, B.A., 2007
    • Columbia Law School, J.D., Harlan Fiske Stone Scholar, 2012
    • University of Maryland, College Park, B.A., 2007
    • Columbia Law School, J.D., Harlan Fiske Stone Scholar, 2012
    • District of Columbia
    • Maryland
    • District of Columbia
    • Maryland

Brandon's Insights

Client Alert | 11 min read | 05.17.24

FTC Finalizes Modifications to Broaden the Applicability of the Health Breach Notification Rule

On April 26, 2024, the Federal Trade Commission (“FTC”) announced a final rule (“Final Rule”) modifying the Health Breach Notification Rule (“HBNR”). The Final Rule, which largely finalizes changes proposed in a Notice of Proposed Rulemaking published last year (“2023 NPRM”), broadens the scope of entities subject to the HBNR, including many mobile health applications (“apps”) and similar technologies, and clarifies that breaches subject to the HBNR include not only cybersecurity intrusions but also unauthorized disclosures, even those that are voluntary. The Final Rule will take effect 60 days after its publication in the Federal Register....

Recognition

  • The Best Lawyers in America: “Ones to Watch": Health Care Law, 2023-2024; Privacy and Data Security, 2024

Brandon's Insights

Client Alert | 11 min read | 05.17.24

FTC Finalizes Modifications to Broaden the Applicability of the Health Breach Notification Rule

On April 26, 2024, the Federal Trade Commission (“FTC”) announced a final rule (“Final Rule”) modifying the Health Breach Notification Rule (“HBNR”). The Final Rule, which largely finalizes changes proposed in a Notice of Proposed Rulemaking published last year (“2023 NPRM”), broadens the scope of entities subject to the HBNR, including many mobile health applications (“apps”) and similar technologies, and clarifies that breaches subject to the HBNR include not only cybersecurity intrusions but also unauthorized disclosures, even those that are voluntary. The Final Rule will take effect 60 days after its publication in the Federal Register....

|

Brandon's Insights

Client Alert | 11 min read | 05.17.24

FTC Finalizes Modifications to Broaden the Applicability of the Health Breach Notification Rule

On April 26, 2024, the Federal Trade Commission (“FTC”) announced a final rule (“Final Rule”) modifying the Health Breach Notification Rule (“HBNR”). The Final Rule, which largely finalizes changes proposed in a Notice of Proposed Rulemaking published last year (“2023 NPRM”), broadens the scope of entities subject to the HBNR, including many mobile health applications (“apps”) and similar technologies, and clarifies that breaches subject to the HBNR include not only cybersecurity intrusions but also unauthorized disclosures, even those that are voluntary. The Final Rule will take effect 60 days after its publication in the Federal Register....