GREGORY M. GISH
Louisville,KY
Summary
Strategic Privacy & Ethics professional with 24+ years of experience driving enterprise-wide healthcare privacy compliance and data governance initiatives within complex, highly regulated environments. Foundational member of HIPAA Privacy Rule implementation at Humana Inc., with sustained leadership in regulatory oversight, vendor governance, research data ethics, and enterprise risk mitigation. Recognized subject matter expert in HIPAA and HITECH compliance, Business Associate oversight, privacy impact assessments, and breach management. Trusted advisor to executive leadership, procurement, legal, compliance, and business stakeholders. Proven leader of multidisciplinary governance committees overseeing responsible and compliant use of Protected Health Information (PHI).
Overview
30
30
years of professional experience
Work History
Freelance Consultant
02.2026 - Current
Senior Privacy & Ethics Professional
Humana Inc.
06.2018 - 01.2026
- Provide enterprise-level leadership for HIPAA Privacy governance across a national health insurance organization.
- Impact & Leadership:
- Lead governance of PHI access, disclosure, and research utilization across business units.
- Facilitated the Protected Health Information Vendor Ethics (PHIVE) Committee, overseeing review and approval of research proposals involving Humana member PHI.
- Participated as a member of the Protected Information Review Consortium (PIRC) and approved third-party data disclosures.
- Acted as Subject Matter Expert (SME) for HIPAA Privacy policies and procedures enterprise-wide.
- Advised executive stakeholders and contracting teams on vendor use of PHI and Business Associate compliance requirements.
- Conducted annual oversight reviews of Business Associates to ensure regulatory adherence and risk mitigation.
- Oversaw annual review and modernization of HIPAA Privacy policies and procedures.
- Maintained HIPAA Accounting of Disclosures database to ensure audit readiness.
- Represented the Humana Privacy Office in Medicare communication reviews and external material compliance approvals.
- Directed maintenance of Internet Privacy Statements across corporate web properties.
Privacy Consultant
Humana Inc.
11.2002 - 06.2018
- Core contributor to initial implementation and long-term operationalization of the HIPAA Privacy Rule.
- Managed case investigations for Individual Rights requests, breaches, and member complaints, enhancing organizational response to privacy concerns.
- Delivered regulatory interpretation and consultative guidance to business units on complex HIPAA issues, improving understanding and compliance.
- Facilitated enterprise-wide adoption of HIPAA and HITECH requirements, ensuring compliance across all departments.
- Guided contracting departments on permissible uses and disclosures of Protected Health Information.
- Directed vendor privacy documentation and employer-group HIPAA compliance records.
- Member of HIPAA Title II Privacy Rule implementation team (2002–2003).
- Key Contributions:
Credentialing Consultant
Humana Inc.
09.1997 - 11.2002
- Oversaw corporate credentialing operations to ensure compliance and efficiency.
- Facilitated communication between Humana and its credentialing vendor, Aperture, Inc.
- Assisted with accreditation audits conducted by NCQA.
- Conducted market credentialing audits to verify regulatory and accreditation compliance.
Team Leader
Aperture, Inc.
09.1996 - 09.1997
- Led team in healthcare provider credential verification to ensure accuracy and timeliness.
- Ensured adherence to credentialing standards and documentation requirements, maintaining regulatory compliance.
- Mentored junior team members, fostering skill development and professional growth.
Education
Bachelor of Fine Arts - Industrial Design
Columbus College of Art And Design
Columbus, OH05-1996
Skills
- HIPAA & HITECH Regulatory Compliance
- California Consumer Privacy Act (CCPA)
- Vendor Risk & Business Associate Governance
- Breach Response & Regulatory Notifications
- Privacy Impact Assessments (PIAs)
- Policy Development & Regulatory Interpretation
- Enterprise Privacy Strategy
- Research Data Ethics & PHI Oversight
- Medicare Communications Compliance
- Cross-Functional Leadership & Governance
- Data Disclosure & Accounting Management
- Archer
- OneTrust
- TrustArc
- SharePoint
- Microsoft Office Suite
Timeline
Freelance Consultant
02.2026 - Current
Senior Privacy & Ethics Professional
Humana Inc.
06.2018 - 01.2026
Privacy Consultant
Humana Inc.
11.2002 - 06.2018
Credentialing Consultant
Humana Inc.
09.1997 - 11.2002
Team Leader
Aperture, Inc.
09.1996 - 09.1997
Bachelor of Fine Arts - Industrial Design
Columbus College of Art And Design