News & Analysis as of August 12, 2025

Data Protection

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

UK GDPR Regulator Fines Data Processor After Ransomware Attack

Skadden, Arps, Slate, Meagher & Flom LLP on 4/1/2025

On 27 March 2025, the UK Information Commissioner’s Office (ICO) issued a £3.07 million fine to an IT services provider following a ransomware attack in 2022 that affected the company’s health care business. The ransomware...more

European Health Data Space Regulation enters into force

McDermott Will & Schulte on 3/27/2025

March 26, 2025, marked a pivotal moment in the EU with the European Health Data Space Regulation, (EU) 2025/327 (“EHDS Regulation”), coming into force. The EHDS represents a transformative initiative by the European Union...more

EU moves closer to a unified digital health system with the European Health Data Space Regulation (EHDS)

Hogan Lovells on 6/11/2024

The European Health Data Space (EHDS) Regulation seeks to overcome significant obstacles in digital health by creating a comprehensive framework for sharing electronic health data. It aims to establish clear rules, common...more

Re-use of health data to train algorithms: European Union EDHS Proposal

Hogan Lovells on 4/19/2023

The European Health Data Space Regulation (still a proposal) will bring huge changes to the handling and possibilities of electronic health records in the European Union. It will create a common environment, with...more

European Health Data Space: a revolution for electronic health records

Hogan Lovells on 1/5/2023

Health care providers (both private and public) store and make use of electronic health records ("EHRs") in the context of providing health care services. However, the configuration of such EHRs by health providers in the EU...more

The European Health Data Space - Panacea or Poison Pill?

Latham & Watkins LLP on 11/2/2022

On 3 May 2022, the European Commission launched its proposal for a Regulation for the European Health Data Space to “unleash the full potential of health data”. However, questions arise as to whether this proposal is a...more

How Does HIPAA Compare To GDPR?

Fox Rothschild LLP on 11/5/2021

I dive into the HIPAA weeds on a daily basis, and am sometimes asked about similarities and differences between HIPAA and the European Union’s General Data Protection Regulation (GDPR). Fox colleague Nate Williams provoked...more

Telehealth in the United Kingdom: Considerations for Providers

Morgan Lewis on 2/5/2021

With telehealth surging around the globe due to the COVID-19 pandemic, the UK National Health Services has released guidance that provides a set of good practice principles for third-party partners to follow....more

International News: Focus on Global Privacy and Cybersecurity - September 2020

McDermott Will & Schulte on 9/15/2020

Generally, contact tracing refers to an effort by public health officials to identify individuals with whom a patient who has tested positive for an infectious disease has been in close proximity. Public health officials will...more

COVID-19 and Data Protection Compliance: Italy

White & Case LLP on 4/24/2020

Following the outbreak of COVID-19 and its development into a global pandemic, organizations have been implementing exceptional measures to safeguard employees, customers and others against the health threat that is being...more

Privacy and Data Security Alert l March 2020

Shook, Hardy & Bacon L.L.P. on 3/10/2020

Shook Weighs in on Updated CCPA Regulations - In response to extensive public comment, the California Attorney General’s office released modified draft regulations under the CCPA on February 7. Shook has provided initial...more

[Webinar] Resolving Inconsistencies in Requirements for De-identification and Anonymization of Health Data under CCPA, HIPAA, and...

McDermott Will & Schulte on 2/26/2020

For companies seeking to use, license, or otherwise commercialize health data, there are potential inconsistencies among the HIPAA de-identification standard, the CCPA definition of de-identified data, and GDPR requirements...more

How Emerging Privacy Laws Are Impacting the Health Care Industry

WilmerHale on 2/10/2020

This second installment assesses options for moving forward to address emerging gaps and an evolving health care industry. Why? Because the substantial history behind the Health Insurance Portability and Accountability Act...more

Cybersecurity 2020 — The Year in Preview: Changes in Health Data Privacy Legislation

Foley Hoag LLP - Security, Privacy and the... on 12/19/2019

Editors’ Note: This is the fourth in our fourth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year. Our previous entry discussed the CCPA, energy, and Brexit. Up next:...more

2018 Digital Health Data Developments – Navigating Change in 2019

McDermott Will & Schulte on 2/5/2019

Data privacy and security legislation and enforcement saw significant activity in 2018 and early 2019. McDermott’s 2018 Digital Health Year in Review: Focus on Data report – the first in a four-part series – highlights...more

2018 Digital Health Year in Review: Focus on Data

McDermott Will & Schulte on 1/29/2019

Introduction - The past year was an active one for data privacy and security legislation and enforcement. Protection for certain personal data was enhanced internationally by the EU General Data Protection Regulation...more

U.S. hospitals will continue to grapple with GDPR compliance in 2019

Bricker Graydon LLP on 1/10/2019

When the European Union’s General Data Protection Regulation (GDPR) became effective on May 25, 2018, many US-based hospitals struggled to determine whether they were subject to the GDPR and, if so, what they must do to...more

HIPAA and Health Care Data Privacy - 2018 Year-in-Review

Mintz - Health Care Viewpoints on 1/7/2019

Today, we’re looking back at HIPAA and other privacy and security developments in 2018. This past year saw continued HIPAA enforcement (including the largest ever fine for a HIPAA breach), reminders from the OCR on best...more

Does GDPR Regulate Clinical Care Delivery by US Health Care Providers?

McDermott Will & Schulte on 2/27/2018

The General Data Protection Regulation establishes protections for the privacy and security of personal data about individuals in the European Economic Area countries, and potentially affects the medical tourism programs and...more

Practical GDPR Steps for US-Headquartered Life Sciences Companies

Mintz - Privacy & Cybersecurity Viewpoints on 2/13/2018

In case you had not heard, the European Union is replacing its current privacy laws with a new, comprehensive General Data Protection Regulation (GDPR), which takes effect May 25, 2018. The essential principles of the EU’s...more

General Data Protection Regulation: What It Means For US Healthcare/Life Science Companies (Part One)

Foley Hoag LLP - Security, Privacy and the... on 8/25/2017

The clock is ticking: on May 25, 2018, in less than a year from now, the General Data Protection Regulation (“the GDPR”) will apply in all Member States of the European Union (“EU”) and will replace the Directive 95/46/CE...more

General Data Protection Regulation: What It Means For US Healthcare/Life Science Companies (Part Two)

Foley Hoag LLP - Security, Privacy and the... on 8/25/2017

New General Features of the GDPR - Some of the GDPR general features may be of particular interest for companies in the healthcare/life science sectors....more

An Opportunity to Shape Compliance with GDPR

Hogan Lovells on 4/24/2017

A close observer of the GDPR will have noticed that, in several places, individual EU Member States can implement derogations from the GDPR requirements. Of course, as a regulation under EU law there is less scope for local...more

Health Company Fined by UK’s Information Commissioner Office

Hogan Lovells on 3/8/2017

Last week, the UK’s Information Commissioner’s Office (ICO) published a monetary penalty notice which fined a private healthcare company, HCA International, £200,000 for its failure to keep sensitive data secure....more

24 Results

View per page

Page: of 1

General Data Protection Regulation (GDPR) › Health Care Providers › Data Protection

"My best business intelligence, in one easy email…"