On January 6, the Department of Health and Human Services Office for Civil Rights (OCR) published a notice of proposed rulemaking (Proposed Rule) that would strengthen the requirements of the security rule promulgated...more
On March 18, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) released updated guidance to “increase clarity” for entities regulated by the Health Insurance Portability and Accountability...more
On April 13, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) released a Notice of Proposed Rulemaking (NPRM) to amend the HIPAA Privacy Rule, 45 C.F.R. Part 160 and Part 164, Subparts A...more
4/18/2023
/ Comment Period ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
Dobbs v. Jackson Women’s Health Organization ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Privacy Rule ,
NPRM ,
OCR ,
Patient Privacy Rights ,
PHI ,
Public Comment ,
Reproductive Healthcare Issues
On April 28, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) entered into a resolution agreement with Peachstate Health Management, LLC, doing business as AEON Clinical Laboratories...more
5/27/2021
/ Covered Entities ,
Department of Health and Human Services (HHS) ,
Due Diligence ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
HIPAA Privacy Rule ,
Holding Companies ,
Noncompliance ,
OCR ,
PHI ,
Private Equity Firms ,
Settlement ,
Telehealth
On January 14, the Fifth Circuit vacated the University of Texas M.D. Anderson Cancer Center’s (M.D. Anderson) $4.3 million fine for HIPAA violations arising from its loss of more than 35,000 individuals’ protected health...more
1/26/2021
/ Class Action ,
Covered Entities ,
Data Breach ,
Department of Health and Human Services (HHS) ,
Electronic Protected Health Information (ePHI) ,
Employees ,
Encryption ,
Health Insurance Portability and Accountability Act (HIPAA) ,
OCR ,
Patients ,
Penalties ,
Vacated
On December 10, 2020, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) released a notice of proposed rulemaking (NPRM) to amend the Standards for the Privacy of Individually Identifiable Health...more
1/5/2021
/ Caregivers ,
Family Members ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Privacy Rule ,
Information Sharing ,
Notice of Privacy Practices ,
NPRM ,
OCR ,
PHI ,
Proposed Amendments ,
Proposed Rules ,
Right-To-Access ,
Value-Based Care
Enforcement activity by the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) showed no signs of slowing throughout 2018 and has already picked up speed in 2019. More recent and significant actions...more
4/25/2019
/ Administrative Law Judge (ALJ) ,
California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
Compliance ,
Cybersecurity ,
Electronic Medical Records ,
Electronic Protected Health Information (ePHI) ,
Enforcement Actions ,
General Data Protection Regulation (GDPR) ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
Medical Records ,
OCR ,
Patient Privacy Rights ,
Personally Identifiable Information ,
PHI
On December 13, 2016, President Obama signed the 21st Century Cures Act (the Cures Act) into law. The Cures Act addresses a wide range of healthcare topics including clinical research, treatment of mental health and substance...more
12/19/2016
/ 21st Century Cures Act ,
Barack Obama ,
Business Associates ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
EHR ,
Health Information Technologies ,
Health Insurance Portability and Accountability Act (HIPAA) ,
National Institute of Health (NIH) ,
New Legislation ,
OCR ,
OIG ,
Patient Access ,
PHI ,
Privacy Policy