On August 11, 2025, the Office for Civil Rights (OCR) published updated guidance relating to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (Privacy Rule) in the form of two new FAQs. The FAQs...more
On July 24, 2025, during a public meeting following public comment, the California Privacy Protection Agency (CPPA) Board unanimously approved amendments to the California Consumer Privacy Act (CCPA). These substantial...more
The rise of large language models (LLMs) such as ChatGPT has created novel legal implications surrounding the development and use of such artificial intelligence (AI) systems. One of the most closely watched AI cases...more
Reproductive health privacy is once again in the legal spotlight with a recent federal district court decision that struck down nearly all of a recent rule under the Health Insurance Portability and Accountability Act (HIPAA)...more
7/21/2025
/ Abortion ,
Constitutional Challenges ,
Data Privacy ,
Disclosure Requirements ,
Enforcement ,
Health Care Providers ,
Healthcare ,
Privacy Laws ,
Reproductive Healthcare Issues ,
SCOTUS ,
State and Local Government ,
State Privacy Laws
On July 1, 2025, California Attorney General Rob Bonta announced a settlement with Healthline Media LLC stemming from alleged violations of the state’s consumer privacy law, the California Consumer Privacy Act (CCPA)....more
Video Privacy Protection Act (VPPA) class action lawsuits have been on the rise, and the owner of the The Onion, a popular satire site, finds itself the subject of a recent one. On May 16, 2025, a plaintiff-initiated...more
On May 15, 2025, a district court in Illinois denied a motion by defendant Hospital Sisters Health System and Saint Francis (HSHS) to dismiss a class action claim brought against the hospital system under the Illinois Genetic...more
5/23/2025
/ Biometric Information ,
Data Privacy ,
Employee Rights ,
Employment Litigation ,
Health Care Providers ,
Hiring & Firing ,
Hospitals ,
Illinois ,
Medical History ,
Privacy Laws ,
State Privacy Laws
On March 27, 2025, a class action lawsuit was filed against the education technology (EdTech) company Instructure, the parent company of Canvas, a popular learning management system. The complaint alleges that Instructure...more
4/4/2025
/ Class Action ,
Consent ,
Constitutional Challenges ,
Data Collection ,
Data Privacy ,
EdTech ,
Online Safety for Children ,
Personal Information ,
Privacy Laws ,
State Privacy Laws ,
Student Privacy
In recent news, New York’s Stram Center for Integrative Medicine reported a security incident involving an employee misusing a patient’s payment card information. According to a breach report filed with the U.S. Department of...more
Last week, two separate class actions were filed in the federal district court for the Southern District of Texas against DISA Global Solutions (DISA), a third-party employment screening services provider, related to an April...more