Services for teams that need more than a template
When the free assessment and toolkits aren’t enough, bring in JHarris Advisory to adapt to real operations
See the full 2026 HIPAA landscape (proposed changes, readiness plan, and toolkits) at the HIPAA proposed rule guide page.
Every engagement is fixed-scope and fixed-fee. You know the number before we start, and it drops into a budget line without a partner call. Each includes a Counsel Review Gate: I build the operational infrastructure; your attorneys confirm legal sufficiency.
Services are management consulting and operational governance services - not legal advice or legal representation.
AI Governance Implementation
You get: intake workflow, risk-tiering rubric, approval matrix, vendor-diligence process, minimum-viable controls, and a governance-committee model — one operating system, NIST AI RMF-aligned.
Timeline: 5–8 weeks
Fee: From $18,000
Done when: a new AI use case moves from intake to approval without me in the room — rubric in use, an approval matrix your committee follows, and a board-ready reporting template in hand.
HIPAA Compliance Support
You get: HIPAA gap review, policy and workflow review, BAA issue-spotting, and incident-readiness and leadership briefing support.
Timeline: 4–6 weeks
Fee: From $22,000
Done when: you hold a prioritized gap report, remediated policies, a BAA fix list, and an incident-readiness brief leadership has seen.
Related: HIPAA Assessment + HIPAA Toolkit
Legal, Court & Clerk AI Governance
You get: AI-use policy, citation-verification standard, confidentiality and court AI policy, redaction and records-access protocol, and vendor review.
Timeline: 4–6 weeks
Fee: From $15,000
Done when: an adopted AI-use policy, a citation-verification standard staff follow, and a redaction and records-access protocol are in place.
Related: Solo Attorney & Court Assessments + Toolkits
Privacy & Data Governance
You get: data-use review, privacy gap assessment (CCPA/CPRA, GDPR if in scope), vendor and data-sharing issue-spotting, remediation roadmap, and an executive summary.
Timeline: 6–8 weeks
Fee: From $15,000
Done when: leadership has a gap assessment mapped to the regs, a vendor and data-sharing risk list, and a prioritized remediation roadmap they can act on.
Related: CCPA/GDPR Assessment + CCPA/CPRA Toolkit
Incident Readiness Support
You get: severity framework, Day-1 checklist, escalation map, breach decision support, a tabletop scenario, and an executive debrief.
Timeline: 3–5 weeks
Fee: From $12,000
Done when: your team has walked the escalation map, run one tabletop, and holds a severity framework and Day-1 checklist ready to use.
Education AI & Data Governance
You get: district or institutional AI policy, student-data controls (FERPA/COPPA), vendor-vetting rubric, a board and executive adoption package, and a GLBA overlay.
Timeline: 6–8 weeks
Fee: From $15,000
Done when: an adopted AI policy, documented student-data controls, a vendor-vetting rubric in use, and a delivered board adoption package.
Related: K-12 & Higher-Ed Assessments + Toolkits
Get In Touch
Tell me what you're working on and I'll come back with a scope within 48 hours.
Frequently Asked Questions
Still have questions? Take a look at the FAQ or reach out anytime.
-
Helps organizations build operational infrastructure to deploy AI responsibly — intake workflows, risk tiering, approval processes, vendor oversight, documentation standards.
-
JHarris Advisory HIPAA engagements are fixed-scope and typically run 3-6 weeks.
-
Yes — especially in regulated industries. The exposure from an undocumented AI deployment is not proportional to headcount. Regulators focus on whether governance exists.
-
A consultant builds programs. A lawyer gives legal advice. JHarris Advisory is both — operational delivery with a built-in Counsel Review Gate.
-
Healthcare, K-12 and higher education, law firms and court systems, and data-driven businesses in regulated industries.
-
Evaluates current controls against HIPAA Privacy, Security, and Breach Notification Rules. JHarris Advisory offers a free 30-question version with a scored readiness level.
-
Boutique practice — you work directly with Jeremy Harris. Engagements are fixed-scope, operationally focused, and priced for mid-market organizations.