News & Analysis as of

HIPAA Security Rule Health Insurance Portability and Accountability Act (HIPAA)

Mintz - Health Care Viewpoints

OCR Releases New HIPAA Security Risk Assessment Tool

In a move that underscores the growing urgency around health care cybersecurity, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has released version 3.6 of its Security Risk Assessment...more

Ankura

[Webinar] Navigating HIPAA Security Rule Compliance in the Era of AI and Digital Health - September 17th, 9:00 am - 10:00 am PT

Ankura on

The threat landscape is evolving, regulatory expectations are rising, and the stakes are higher than ever as digital health intersects with artificial intelligence. Join legal, compliance, and security experts from Wilson...more

Coblentz Patch Duffy & Bass

Updates to U.S. Health-Data Privacy and Wearable Tech

This year marks a pivotal shift from the era of rapid, unregulated health-tech innovation to one of stringent governance. The proliferation of wearable devices, health applications and remote monitoring tools has led to an...more

NAVEX

5 Essential Healthcare Compliance Laws and Regulations

NAVEX on

Healthcare compliance is the process of following the laws, regulations and ethical standards that govern the healthcare industry. It ensures that healthcare organizations protect patient safety, maintain data privacy and...more

Smith Anderson

$175K HIPAA Settlement Underscores Business Associate Risk Analysis Obligations

Smith Anderson on

In a recent settlement with an accounting firm, the U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) reinforced its ongoing commitment to holding business associates accountable for the...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - October 6th - 9th, San Antonio, TX

Grounded in the OIG’s General Compliance Program Guidance and DOJ’s Evaluation of Corporate Compliance Programs, our immersive, three-and-a-half-day, classroom-style Healthcare Basic Compliance Academy equips compliance...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - September 8th - 11th, Scottsdale, AZ

Grounded in the OIG’s General Compliance Program Guidance and DOJ’s Evaluation of Corporate Compliance Programs, our immersive, three-and-a-half-day, classroom-style Healthcare Basic Compliance Academy equips compliance...more

Jackson Lewis P.C.

OCR’s “Risk Analysis” Enforcement Initiative Continues Against Another Business Associate

Jackson Lewis P.C. on

On August 18, 2025, the Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement with BST & Co. CPAs, LLP (BST). The announcement continues OCR’s escalating enforcement of the HIPAA...more

Health Care Compliance Association (HCCA)

‘We Cannot Do It Alone’: Cutbacks in Federal Funds, Engagement Spur Cries for HIPAA Help, New Laws

At the very top of Fisher-Titus Medical Center’s website is a link to the Change Healthcare HIPAA notice informing visitors of the last day to register for credit monitoring related to the world’s largest breach, which...more

Ankura

Proposed Changes to HIPAA Security Rule: Strengthening Cybersecurity for Electronic Protected Health Information

Ankura on

Recently proposed amendments to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule are designed to enhance the cybersecurity of electronic protected health information (ePHI). These updates aim to...more

BCLP

The HIPAA Trap: Are You Actually a Covered Entity?

BCLP on

Whenever the topic of health and medical data comes up, the prevailing assumption often is that any of this information is subject to the federal Health Insurance Portability and Accountability Act (HIPAA) just by virtue of...more

Maynard Nexsen

Taking the Pulse, A Health Care and Life Sciences Video Podcast | Episode 243: HIPAA Compliance and Potential Changes with Shannon...

Maynard Nexsen on

This week on the podcast, Lynnsey and Lauren are joined by their colleague, Maynard Nexsen healthcare attorney Shannon Lipham, who helps healthcare providers and practices navigate complex federal and state regulations....more

Wilson Sonsini Goodrich & Rosati

HHS Announces New Director of Office for Civil Rights: What to Watch from the New Health Privacy Leader

On June 4, 2025, the U.S. Department of Health and Human Services (HHS) announced the appointment of Paula M. Stannard as the Director of the Office for Civil Rights (OCR). As Director, Stannard will lead the enforcement of...more

ArentFox Schiff

OCR’s Risk Analysis Initiative: Lessons From Recent HIPAA Enforcement Actions

ArentFox Schiff on

Health care organizations are under pressure to shore up their cybersecurity response efforts. Much of this pressure is coming from the US Department of Health and Human Services Office for Civil Rights (OCR), which has made...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

2025 Enforcement Trends: Risk Analysis Failures at the Center of HHS’s Multimillion-Dollar HIPAA Penalties

In the first five months of 2025, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced it had entered into ten Health Insurance Portability and Accountability Act (HIPAA) resolution...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - July 21st - 24th, Nashville, TN

Grounded in the OIG’s General Compliance Program Guidance and DOJ’s Evaluation of Corporate Compliance Programs, our immersive, three-and-a-half-day, classroom-style Healthcare Basic Compliance Academy equips compliance...more

Health Care Compliance Association (HCCA)

Former OCR Director Fontes Rainer Reflects On ‘Imperfect’ RSP Law, Urges Final Security Reg

In October, the HHS Office for Civil Rights (OCR) fined Providence Medical Institute (PMI) $240,000, an amount that reflected a 20% discount for having “recognized security practices” (RSPs) in place. But many more covered...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - June 9th - 12th, Pittsburgh, PA

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

Robinson+Cole Data Privacy + Security Insider

Northeast Radiology Settles with OCR

The Office for Civil Rights (OCR) announced on April 10, 2025, that it has settled alleged HIPAA Security Rule violations with Northeast Radiology for $350,000....more

Ankura

HIPAA Security Risk Analysis – How should regulated entities prepare for the Office for Civil Rights (OCR) Risk Analysis Audit...

Ankura on

Following the Office for Civil Rights (OCR) recent publication of four settlements as part of a new Risk Analysis Audit Initiative. We explore the current regulatory language for Risk Analysis, the proposed language for Risk...more

Spilman Thomas & Battle, PLLC

The Health Record - Healthcare Law Insights, V 2, Issue 4, April 2025

Welcome to our fourth issue of 2025 of The Health Record -- our healthcare law insights e-newsletter. In this edition, we look at prior authorization transparency and physician decision-making; the impact of Medicaid cuts...more

Arnall Golden Gregory LLP

OCR Announces Fifth Settlement Under Its Risk Analysis Initiative

Background - On March 21, 2025, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced a settlement with Health Fitness Corporation (“Health Fitness”), a company that provides wellness...more

Warner Norcross + Judd

OCR Enforcement Intensifies: Key Takeaways on Risk Analysis and Right of Access

Warner Norcross + Judd on

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services has renewed its focus on two critical areas of HIPAA compliance: risk analysis and individual right of access. These enforcement...more

Bradley Arant Boult Cummings LLP

Top 10 takeaways from the new HIPAA security rule NPRM

On Jan. 6, 2025, the U.S. Department of Health and Human Services (HHS) proposed new regulations to enhance cybersecurity protections for electronic protected health information (ePHI) under the Health Insurance Portability...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - March 24th - 27th, Chicago, IL

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

198 Results
 / 
View per page
Page: of 8

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide