News & Analysis as of

Department of Health and Human Services (HHS) Enforcement Actions Health Insurance Portability and Accountability Act (HIPAA)

Goodwin

CCPA Settlement Signals Focus on Web Tracking Health Data

Goodwin on

In June 2025, California Attorney General Rob Bonta filed a proposed settlement with Healthline, a health information website, for its handling of personal information under the California Consumer Privacy Act (CCPA)....more

Dinsmore & Shohl LLP

Recent OCR Settlements Emphasize the Need for Thorough HIPAA Risk Analysis

Dinsmore & Shohl LLP on

Two settlements recently announced by the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) reinforce the agency’s emphasis on promoting thorough risk analysis to help prevent disclosure of...more

Cozen O'Connor

Democratic AGs Sue HHS, DHS Over Alleged Health Data Sharing

Cozen O'Connor on

20 Democratic AGs sued HHS and DHS for allegedly sharing personal health data with ICE. The complaint alleges that the Centers for Medicare & Medicaid Services—a division of HHS—transferred millions of individuals’ Medicaid...more

Wilson Sonsini Goodrich & Rosati

Texas District Court Vacates 2024 HIPAA Rule Designed to Enhance Reproductive Healthcare Privacy, Effective Nationwide

On June 18, 2025, the United States District Court for the Northern District of Texas vacated most of the rules designed to enhance reproductive healthcare privacy promulgated by the U.S. Department of Health and Human...more

Rivkin Radler LLP

OCR Announces $800,000 HIPAA Settlement with Florida Health System

Rivkin Radler LLP on

The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has announced another settlement for alleged violations of HIPAA. OCR investigated BayCare Health System, which serves central Florida, after a...more

Blank Rome LLP

[Webinar] 180 Days of the Trump Administration—Quick Hits on Executive Orders, Actions, and Policies - July 17th - August 13th,...

Blank Rome LLP on

Blank Rome presents a new summer webinar series where our interdisciplinary team will unpack the most pressing legal, regulatory, and policy developments from the Trump Administration’s first 180 days. Each session offers...more

Hogan Lovells

Compliance considerations following Texas Court decision vacating key provisions of 2024 HIPAA Privacy Rule protecting...

Hogan Lovells on

The U.S. District Court for the Northern District of Texas vacated key portions of the 2024 updates to the HIPAA Privacy Rule that had strengthened protections for reproductive health care information. HIPAA-regulated...more

Saul Ewing LLP

Federal District Court Issues Opinion Vacating HHS Rule Protecting Reproductive Health Information

Saul Ewing LLP on

On June 18, 2025, U.S. District Judge Matthew Kacsmaryk of the Northern District of Texas (the “District Court”) vacated a 2024 final rule issued by the U.S. Department of Health and Human Services (“HHS”) under the Biden...more

Quarles & Brady LLP

HIPAA Reproductive Health Rule Vacated Nationally

Quarles & Brady LLP on

A federal judge in Texas has vacated almost all of the 2024 HIPAA Rule to Support Reproductive Health Care Privacy that created special protections for reproductive health care information, finding that the U.S. Department of...more

Warner Norcross + Judd

Federal Court Vacates HIPAA Rule on Reproductive Health Care Privacy

Warner Norcross + Judd on

Last year, the federal Office for Civil Rights (OCR) modified the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule to strengthen protections for reproductive health care information (the “2024 Rule”)....more

Davis Wright Tremaine LLP

HIPAA Attestation Requirement Is No More

On June 18, 2025, in Purl v. U.S. Dep't of Health and Human Services, the U.S. District Court for the Northern District of Texas vacated the 2024 amendments to the HIPAA Privacy Rule that enhanced certain privacy protections...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

2025 Enforcement Trends: Risk Analysis Failures at the Center of HHS’s Multimillion-Dollar HIPAA Penalties

In the first five months of 2025, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced it had entered into ten Health Insurance Portability and Accountability Act (HIPAA) resolution...more

Clark Hill PLC

Right To Know - May 2025, Vol. 29

Clark Hill PLC on

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: Virginia Governor Signs Bill Restricting Minor’s Use of Social Media:...more

Health Care Compliance Association (HCCA)

Former OCR Director Fontes Rainer Reflects On ‘Imperfect’ RSP Law, Urges Final Security Reg

In October, the HHS Office for Civil Rights (OCR) fined Providence Medical Institute (PMI) $240,000, an amount that reflected a 20% discount for having “recognized security practices” (RSPs) in place. But many more covered...more

Clark Hill PLC

Right To Know - April 2025, Vol. 28

Clark Hill PLC on

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. ...more

Warner Norcross + Judd

OCR Enforcement Intensifies: Key Takeaways on Risk Analysis and Right of Access

Warner Norcross + Judd on

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services has renewed its focus on two critical areas of HIPAA compliance: risk analysis and individual right of access. These enforcement...more

Saul Ewing LLP

OCR Imposes $200,000 Civil Money Penalty Against HIPAA-Covered Entity

Saul Ewing LLP on

On March 6, 2025, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil money penalty (“CMP”) of $200,000 against Oregon Health & Science University (“OHSU”) for failing to...more

Jackson Lewis P.C.

Health Fitness, OCR’s Risk Analysis Initiative, and the ERISA Fiduciary Duty to Select Plan Service Providers

Jackson Lewis P.C. on

On Friday, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced the fifth enforcement action under its Risk Analysis Initiative. In this case, OCR reached a settlement with Health...more

Clark Hill PLC

Right To Know - March 2025, Vol. 27

Clark Hill PLC on

Cyber, Privacy, and Technology Report - Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed....more

McDermott Will & Schulte

Healthcare Regulatory Check-Up Newsletter | January 2025 Recap

This issue of McDermott’s Healthcare Regulatory Check-Up highlights regulatory activity for January 2025. This month features long-awaited proposed and final rules regarding the Health Insurance Portability and Accountability...more

Nilan Johnson Lewis PA

Nine Steps Healthcare Entities Should Take to Prevent Cyberattacks

Nilan Johnson Lewis PA on

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently imposed a $1.5 million civil money penalty against Warby Parker, Inc., a manufacturer and online retailer of eyewear, for...more

Husch Blackwell LLP

ICE at Healthcare Facilities: What Should You Do

Husch Blackwell LLP on

In 2003, Congress created the Department of Homeland Security (DHS). Within the DHS is the interior enforcement arm, U.S. Immigration and Customs Enforcement (ICE), that enforces federal laws governing border control,...more

Quarles & Brady LLP

HIPAA Reproductive Health Care Privacy - New Administration Evaluating Its Position

Quarles & Brady LLP on

As the Trump administration stakes dramatically new positions on matters across the federal government, we are waiting to learn its view on the HIPAA Privacy Rule to Support Reproductive Health Care Privacy Final Rule,...more

Health Care Compliance Association (HCCA)

We’ll Take the Fine: OCR’s ‘Unwarranted,’ Costly Demands Prompted Hospital’s $538K Payment

The saga that led Children’s Hospital Colorado to accept a fine of more than $500,000 imposed by the HHS Office for Civil Rights (OCR) began on July 11, 2017, when a physician’s email account containing details on 3,300...more

Sheppard Mullin Richter & Hampton LLP

2025 Top-of-Mind Issues for Life Sciences Companies

DTC Telehealth Platforms - Arrangements involving telemedicine and direct-to-consumer (“DTC”) business services are expected to be a source of major regulatory scrutiny. In 2024, such arrangements were the focus of proposed...more

186 Results
 / 
View per page
Page: of 8

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide