News & Analysis as of

Penalties Health Insurance Portability and Accountability Act (HIPAA)

Troutman Pepper Locke

Virginia's Protection of Reproductive Health Information Law – Part One, Scope, Applicability, and Penalties

Troutman Pepper Locke on

In Part One of this FAQ series, we break down Virginia's Senate Bill 754, Consumer Protection Act; prohibited practices, etc., reproductive or sexual health information (Act), which amends the Virginia Consumer Protection Act...more

Ropes & Gray LLP

Navigating TRAIGA: Texas’s New AI Compliance Framework

Ropes & Gray LLP on

On June 22, 2025, Texas enacted the Texas Responsible Artificial Intelligence Governance Act (“TRAIGA”), putting it at the forefront of state-level AI regulation in the United States. TRAIGA becomes effective January 1, 2026....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

2025 Enforcement Trends: Risk Analysis Failures at the Center of HHS’s Multimillion-Dollar HIPAA Penalties

In the first five months of 2025, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced it had entered into ten Health Insurance Portability and Accountability Act (HIPAA) resolution...more

Katten Muchin Rosenman LLP

Have You Done Your Part to Comply with Part 2 Changes?

Important changes are coming to 42 CFR Part 2 (Part 2), which deals with the confidentiality of patients’ substance use disorder (SUD) records. On April 16, 2024, the US Department of Health and Human Services (HHS) published...more

Health Care Compliance Association (HCCA)

Former OCR Director Fontes Rainer Reflects On ‘Imperfect’ RSP Law, Urges Final Security Reg

In October, the HHS Office for Civil Rights (OCR) fined Providence Medical Institute (PMI) $240,000, an amount that reflected a 20% discount for having “recognized security practices” (RSPs) in place. But many more covered...more

Health Care Compliance Association (HCCA)

Disclosure of Full Record to Employer Results in $35K Fine, Broad CAP; Echoes of 2017 HIV Case

It’s not immediately obvious why someone would want to disclose a health care test result as part of a job application. But one such request spurred a Pennsylvania entity to provide a lot more than that: it sent her whole...more

Mintz - Privacy & Cybersecurity Viewpoints

Delaware’s Consumer Privacy Law is Right Around the Corner

Any chancery you might be impacted by the Delaware Personal Data Privacy Act (DPDPA)? (See what we did there?) Impacted companies need to gear up and prepare for compliance as the DPDPA becomes effective on January 1, 2025....more

Rivkin Radler LLP

Million Dollar Penalty Imposed on Pain Management Practice Following HIPAA Breach

Rivkin Radler LLP on

The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced on December 3 that it imposed a $1.19 million penalty on Gulf Coast Pain Consultants, a pain management practice in Florida, following...more

Mintz - Privacy & Cybersecurity Viewpoints

Nebraska’s Consumer Privacy Law Takes Effect Soon and Targets Businesses Selling Personal Data

We are moving westward this week from Iowa to Nebraska in our series of articles providing in-depth summaries of state consumer privacy laws taking effect across the nation. Nebraska Governor Jim Pillen (R) signed the...more

Snell & Wilmer

2024 End-of-Year Plan Sponsor “To Do” List (Part 1) Health and Welfare

Snell & Wilmer on

We are pleased to present our annual End of Year Plan Sponsor “To Do” Lists. This year, we present our “To Do” Lists in four separate SW Benefits Updates. This Part 1 covers year-end health and welfare plan issues. Parts 2,...more

Holland & Knight LLP

Five Red Flags in De-identification and Data Monetization for Healthcare Companies

Holland & Knight LLP on

Healthcare providers running on thin margins or just seeking new (and in the case of tax-exempt providers, permissible) revenue sources may jump at the chance when third party vendors offer to help them monetize their patient...more

King & Spalding

Maryland Online Data Privacy Act

King & Spalding on

On May 9, 2024, Maryland Governor Wes Moore signed the Maryland Online Data Privacy Act of 2024 (“MODPA”) into law. This makes Maryland the fifth state this year and eighteenth state in total to adopt comprehensive data...more

King & Spalding

FTC Announces Final Rule Sweeping Consumer Digital Health Tech Under the Health Breach Notification Rule

King & Spalding on

On April 26, the Federal Trade Commission (FTC) approved its Final Rule revising the Health Breach Notification Rule (HBNR) (“Final Rule”) by a 3-2 vote. The HBNR requires vendors of personal health records (PHR) and related...more

Holland & Hart LLP

Avoiding HIPAA Penalties: A Checklist for Covered Entities

Holland & Hart LLP on

The HIPAA Privacy, Security, and Breach Notification Rules apply to healthcare providers who engage in certain electronic transactions, healthcare clearinghouses, and health plans, including employee group health plans with...more

Mintz - Privacy & Cybersecurity Viewpoints

Maryland Enacts Sweeping Privacy Reform

The push by U.S. states to pass data privacy laws continues with Maryland being the 18th state to join their ranks. However, Maryland has taken a more stringent and comprehensive approach than many of its peers: Governor Wes...more

Mintz - Privacy & Cybersecurity Viewpoints

Maryland Says “Don’t Mess with Kids”

As U.S. states continue to pass data privacy legislation, Maryland has gone above and beyond in signing both the Maryland Online Data Privacy Act of 2024 (MODPA) and the Maryland Age Appropriate Design Code (HB 603/SB...more

White & Case LLP

Kentucky Enacts Comprehensive Data Privacy Law

White & Case LLP on

On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act ("Kentucky CDPA"). The law will...more

Mintz - Privacy & Cybersecurity Viewpoints

Live Free and Protect: New Hampshire Joins the Growing List of States to Adopt a Comprehensive Data Privacy Law in 2024

New Hampshire’s New Law is on the Books - 2023 was a record-breaking year, with legislators in Delaware, Indiana, Iowa, Montana, Oregon, Tennessee and Texas passing comprehensive data privacy laws, joining California,...more

Mintz - Health Care Viewpoints

HHS Health Care Cybersecurity Performance Goals: Proposed Incentives, Penalties and Compliance Standards

As promised in the U.S. Department of Health and Human Services (HHS) concept paper in December 2023, the agency published voluntary health care and public health cybersecurity performance goals (HPH CPGs) in January 2024 and...more

Davis Wright Tremaine LLP

New York City Employers Must Post and Distribute Recently Issued "Workers' Bill of Rights"

By July 1, 2024, employers in New York City are required to post and provide their employees with a "Workers' Bill of Rights," which has now been issued by the Department of Consumer and Worker Protection ("DCWP"). DCWP also...more

Sheppard Mullin Richter & Hampton LLP

HHS Announces 42 Part 2 Final Rule to Align with HIPAA

The U.S. Department of Health and Human Services (HHS) and the Substance Abuse and Mental Health Services Administration (SAMHSA) recently released the long anticipated Final Rule to revise the Confidentiality of Substance...more

Davis Wright Tremaine LLP

Old Rule, New Tricks: HHS Finalizes Most Substantial Changes to Substance Use Disorder Confidentiality Rule in Decades

The long-anticipated final rule addressing substance use disorder (SUD) records at 42 C.F.R. Part 2, commonly referred to as Part 2, is here. The final rule is a joint undertaking by the U.S. Department of Health and Human...more

Foley & Lardner LLP

HIPAA and Part 2 Harmonized: What Health Care Organizations Need to Know

Foley & Lardner LLP on

Substance Use Disorder (SUD) programs and HIPAA-regulated entities seeking to streamline their privacy and security practices and workflows received welcome news from the U.S. Department of Health & Human Services (HHS) last...more

Skadden, Arps, Slate, Meagher & Flom LLP

California’s Data Deletion Law Imposes a Host of New Obligations on Data Brokers

On October 10, 2023, California Gov. Gavin Newsom signed into law Senate Bill 362, also known as the Delete Act, allowing California residents to have their personal information deleted by all registered data brokers...more

Akin Gump Strauss Hauer & Feld LLP

California’s New DELETE Act Grants Residents Historic New Data Rights

In a key move to further expand consumer data rights, California Gov. Gavin Newson signed The Delete Act (S.B. 362) (the Act) into law on October 10, 2023. The Act amends California’s data broker registration law (Cal. Civ....more

91 Results
 / 
View per page
Page: of 4

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide