Photo of John W. Kaveney

Partner, Healthcare and Litigation

John provides legal guidance to healthcare sector clients on a broad variety of topics, including Medicare/Medicaid reimbursement issues, corporate compliance, data privacy and cybersecurity concerns, healthcare provider licensure and medical staffing concerns, involuntary commitment laws, and general healthcare regulatory support. He represents a diverse roster of healthcare entities, including for-profit and nonprofit hospitals and health systems, academic medical centers, individual physicians and physician groups, ambulatory surgery centers, ancillary service providers, medical billing companies, skilled nursing and rehabilitation facilities, behavioral health centers and pharmacies.

John advises on Medicaid reimbursement matters before the New Jersey Division of Medical Assistance and Health Services (DMAHS), which administers the state’s Medicaid programs, and handles Medicare reimbursement disputes, both in New Jersey and in numerous other states, before the federal Provider Reimbursement Review Board (PRRB).

In the area of corporate compliance, John supports clients on matters including the implementation of new, and the assessment and improvement of existing, compliance programs. He assists healthcare clients in navigating compliance audits, internal investigations, and governmental investigations related to compliance issues, including potential violations of the federal Stark Law, Anti-Kickback Statute (AKS), and Civil Monetary Penalties law (CMP). He further provides general guidance concerning compliance and regulatory matters under state and federal healthcare laws.

On issues related to information privacy and cybersecurity at the intersection of healthcare law, John assists providers with issues arising under the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). This includes the implementation and assessment of privacy and security policies and procedures to ensure the proper protection and utilization of protected health information (PHI) both by healthcare providers and the business associates with which they contract. In addition, he represents healthcare clients in investigating, reporting, and remediating information breaches and the liability such breaches create under various information privacy and security laws.

John also counsels healthcare providers with professional licensure issues and advises hospitals and health systems regarding their medical staff bylaws and corresponding policies and procedures, as well as assisting with internal investigations of medical staff members and the corresponding disciplinary process. He further provides legal guidance related to New Jersey’s involuntary commitment laws, and provides representation in civil litigation.

John serves as Editor-In-Chief of Healthcare Perspectives, Greenbaum’s blog covering issues of interest to the healthcare industry.

Results may vary depending on your particular facts and legal circumstances.

Contact information:

jkaveney@greenbaumlaw.com | 973.577.1796 | vCard | LinkedIn

For more information visit the Greenbaum, Rowe, Smith & Davis LLP website.

Last year, we published this blog post about a case filed in the U.S. District Court for the District of New Jersey by two out-of-state physicians alleging that New Jersey’s telehealth licensure requirements were unlawful because they violated the physicians’ freedom of speech by preventing them from communicating with New Jersey residents without a valid…

Medicare telehealth received a critical, if temporary, reprieve with the enactment of new legislation that extends key pandemic-era telehealth flexibilities that were set to expire on January 31, 2026, to December 31, 2027. In this Client Alert from our healthcare team, learn more about the impacts of the new law and why providers, health systems…

On November 12, 2025, President Donald Trump signed, legislation, H.R. 5371, extending key Medicare telehealth flexibilities on a temporary basis through January 1, 2026. Our previous client alert outlined the immediate rollback of pandemic-era telehealth rules following the government shutdown and the resulting disruption. This new legislation temporarily reverses that rollback and restores the…

On March 15, 2025, President Donald Trump signed a continuing resolution extending funding of the federal government through September 2025. Included in the continuing resolution were provisions that also extended Medicare telehealth flexibilities through September 2025.

Many providers in the healthcare industry have come to rely upon these virtual services for the delivery of care…

On September 26, 2024, the Health Infrastructure Security and Accountability Act was introduced in the U.S. Senate. The bill would amend the Health Insurance Portability and Accountability Act (HIPAA) and direct the U.S. Department of Health and Human Services (HHS) to develop new “mandatory minimum cybersecurity standards for health care providers, health plans, clearinghouses and…

On June 24, 2024, the U.S. Department of Health and Human Services (HHS) released a final rule establishing stringent financial penalties, referred to as “disincentives,” for healthcare providers found to have committed information blocking.

In instances where the HHS Office of Inspector General (OIG) finds a healthcare provider has committed information blocking and refers the…