On June 18, 2025, the U.S. District Court for the Northern District of Texas issued an order to vacate a large portion of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule to Support Reproductive...more
On January 22, the New York State Legislature passed Senate Bill S929, titled the New York Health Information Privacy Act (NYHIPA), which is poised to redefine how businesses handle health and wellness-related data in and...more
2/10/2025
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Pending Legislation ,
Personal Data ,
PHI ,
Privacy Laws ,
Sensitive Personal Information ,
State Privacy Laws
On December 27, 2024, the Department of Health and Human Services (HHS) issued a notice of proposed rulemaking (NPRM) related to the Security Rule under the Health Insurance Portability and Accountability Act (HIPAA). ...more
1/8/2025
/ Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Data Security ,
Department of Health and Human Services (HHS) ,
Encryption ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Security Rule ,
NPRM ,
Proposed Amendments ,
Proposed Rules ,
Security and Privacy Controls
In the wake of Change Healthcare’s February 2024 ransomware attack, which affected the protected health information (PHI) of at least 100 million individuals — the largest breach of PHI in history — the federal government’s...more
On June 20, 2024, a Texas federal judge ruled that guidance published by the Department of Health and Human Services (the Department) prohibiting covered entities from disclosing information collected by third-party...more
6/28/2024
/ Business Associates ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
Enforcement Authority ,
Guidance Update ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Privacy Rule ,
OCR ,
PHI ,
Regulatory Authority ,
Tracking Systems ,
Web Tracking ,
Websites
On March 18, 2024, the U.S. Department of Health and Human Services Office for Civil Rights (HHS-OCR) revised its controversial December 2022 bulletin (the December 2022 Bulletin) regarding the use of tracking technologies by...more
3/28/2024
/ Business Associates ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
Enforcement ,
Enforcement Priorities ,
Guidance Update ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
OCR ,
PHI ,
Tracking Systems ,
Web Tracking ,
Websites
On February 2, 2024, the Department of Health and Human Services (HHS) issued a Final Rule that expands access to medications for the treatment of opioid use disorder (OUD) via telehealth modalities and “take-home” doses....more
3/1/2024
/ Coronavirus/COVID-19 ,
Data Privacy ,
Data Security ,
DEA ,
Department of Health and Human Services (HHS) ,
Final Rules ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opioid ,
Prescription Drugs ,
SAMHSA ,
Substance Abuse ,
Telehealth
During the COVID-19 public health emergency (PHE), many federal telehealth rules were made flexible to accommodate the need for continued access to healthcare, including prescribing controlled substances without an in-person...more