On January 6, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) published significant proposed amendments (proposed rule) to the Security Rule under the Health Insurance Portability and...more
1/7/2025
/ Covered Entities ,
Data Privacy ,
Data Security ,
Department of Health and Human Services (HHS) ,
Electronic Protected Health Information (ePHI) ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
Healthcare Reform ,
HIPAA Security Rule ,
OCR ,
Patient Privacy Rights ,
PHI ,
Proposed Rules ,
Regulatory Agenda ,
Rulemaking Process
On September 4, Texas Attorney General (AG) Ken Paxton filed a lawsuit against the Department of Health and Human Services (HHS) Office for Civil Rights (OCR), challenging two key Health Insurance Portability and...more
9/13/2024
/ Data Privacy ,
Department of Health and Human Services (HHS) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
HIPAA Privacy Rule ,
OCR ,
PHI ,
State and Local Government ,
State Attorneys General ,
State Privacy Laws ,
Statutory Authority ,
Texas
On March 18, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued an updated bulletin to "increase clarity for regulated entities and the public" with respect to the use of online tracking...more
On February 8, 2024, the Department of Health and Human Services (HHS) posted a final rule that aims to align 42 CFR Part 2 (Part 2) — which protects certain substance abuse disorder (SUD) records — with the Health Insurance...more
2/22/2024
/ CARES Act ,
Consent ,
Data Privacy ,
Data Protection ,
Department of Health and Human Services (HHS) ,
Electronic Medical Records ,
Final Rules ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
HITECH Act ,
Personally Identifiable Information ,
PHI ,
Substance Abuse
On January 1, California's Assembly Bill No. 352 (AB 352) went into effect, introducing significant changes to the handling and sharing of sensitive health information — particularly information related to reproductive health...more
1/23/2024
/ California ,
CMIA ,
Consumer Privacy Rights ,
Data Management ,
Data Privacy ,
Data Protection ,
Electronic Medical Records ,
Health Care Providers ,
Healthcare ,
Information Governance ,
New Legislation ,
Personally Identifiable Information ,
PHI ,
Regulatory Reform ,
Regulatory Requirements ,
Reproductive Healthcare Issues
Online Tracking Technologies and HIPAA. In December 2022, the Department of Health and Human Services Office for Civil Rights (OCR) published a bulletin on the use of online tracking technologies (e.g., cookies or web...more
On April 27, the state of Washington enacted the My Health My Data Act (MHMDA), a comprehensive health privacy law that imposes broad restrictions on how “consumer health data” can be used by companies doing business in the...more