Attorney Liz Heddleston

Elizabeth Barry Heddleston


Liz helps a wide range of clients in the healthcare industry navigate the complex legal landscape governing healthcare.

Get To Know Liz

Liz has devoted her legal career to health law and understands the distinct legal challenges facing healthcare organizations and businesses operating in the healthcare space. She has a broad-based health law practice with a significant focus on health information privacy and security. Combining industry experience with a solutions-oriented approach, Liz provides practical guidance on a spectrum of regulatory, corporate, and operational matters impacting healthcare clients.

Liz represents hospitals, medical and dental practices, long-term care facilities, federally qualified health centers, behavioral health providers, health plans, healthcare technology companies and other healthcare entities. She counsels clients on a wide range of business and regulatory compliance issues, including anti-kickback and self-referral statutes, payor contracting and reimbursement, Medicare and Medicaid issues, federal and state privacy laws, corporate governance, contract review and negotiation, medical staff and patient care issues. Given the complex and evolving nature of the healthcare industry, Liz regularly coordinates with colleagues in practice areas such as cybersecurity, employment law, tax, and litigation to help clients with strategic and day-to-day legal challenges.

A significant part of Liz’s practice focuses on HIPAA compliance, health information privacy and security, and cybersecurity incidents impacted healthcare entities. Liz is Certified in Healthcare Privacy Compliance (CHPC®) and provides strategic guidance on complying with laws governing health data, including HIPAA, 42 C.F.R. Part 2, the Information Blocking Rule, and state data privacy laws.

As part of a comprehensive risk management strategy, Liz helps clients build and update their HIPAA compliance programs, including assistance with policy and procedures, security risk assessments, and staff training programs. She counsels clients on day-to-day privacy and security issues, and helps clients draft and negotiate Business Associate Agreements, data sharing agreements, and healthcare technology agreements.

Liz is regularly on the frontlines of HIPAA breaches and cyber incidents impacting health data. She advises clients on breach response strategies, notification and reporting obligations, and post-breach compliance and remediation. She has helped clients successfully resolve HIPAA complaint investigations and compliance audits conducted by the HHS Office for Civil Rights.

Liz has been included in the "Virginia Rising Stars" list in Health Care Law by Virginia Super Lawyers and has been named to Best Lawyers of America "Ones to Watch" for Health Care Law. In 2022, she was named a Virginia Lawyers Weekly “Up & Coming Lawyer.”

A Bethesda, Md. native, Liz graduated from Davidson College with a B.A. in English and earned her law degree from William & Mary School of Law (magna cum laude, Order of the Coif). Prior to law school, Liz worked for five years as a newspaper journalist in Lynchburg, Virginia.

Liz is a founding board member of Huddle Up Moms, a Roanoke-based non-profit dedicated to improving maternal health outcomes and empowering mothers through education, connection, and support. Outside of work, she enjoys running, rock climbing, and spending time outdoors with her daughters.



William & Mary School of Law, J.D., magna cum laude, Order of the Coif

Davidson College, B.A.




  • American Bar Foundation, Fellow
  • American Health Law Association
  • Virginia Bar Association, Health Law Section Council Member
  • Huddle Up Moms, Board Member
  • People Places, Board Member 
  • Roanoke Bar Association
  • Health Care Compliance Association

News & Insights

Matter results depend upon a variety of factors unique to each case. Past results do not guarantee or predict a similar result in any future matter. Some material on this site may be considered attorney advertising in some jurisdictions.

Jump to Page