Nassau County Judge Jerome C. Murphy issued a temporary restraining order (TRO) on Jan. 27, 2025, preventing the New York State Department of Health (DOH) from moving forward with the consolidation of the Consumer Directed...more
On October 2, the New York State Department of Health (NYSDOH) issued new cybersecurity regulations (Regulations) for all general hospitals in New York state (“hospitals”), creating a new Section 405.46 in Title 10 (Health)...more
New York hospitals have less than a year to dust off their Health Insurance Portability and Accountability Act (HIPAA) compliance programs and update them to comply with more stringent and detailed state regulations. Last...more
In November 2023, New York Governor Kathy Hochul announced proposed regulations that would be the first state regulations for hospitals in New York. The governor described the proposed regulation as a “nation-leading...more
On November 13, 2023, Governor Kathy Hochul announced plans to regulate cybersecurity for New York general hospitals regulated under Article 28 of the Public Health Law. As proposed, the regulations will provide an additional...more
On July 7, 2022, Pennsylvania Governor Tom Wolf signed House Bills 1561 and 1563 into law, as Act 32 of 2022 and Act 33 of 2022, respectively. Act 32 of 2022 amended the confidentiality provisions of the state Mental Health...more
Many California health care providers, including hospitals and physician groups, will soon be required to sign on to California’s first-ever statewide data sharing agreement governing the exchange of health and social...more
In a recent post, we highlighted the need for a privacy and cybersecurity training program, one not solely focused on spotting phishing attempts (although that is quite important as well). A primary reason, quite simply, is...more
Report on Patient Privacy 20, no. 8 (August 2020) - HHS changed its tone on care coordination and case management in the final Confidentiality of Substance Use Disorder Patient Records regulation (42 C.F.R. § 2), known...more
Report on Patient Privacy 20, no 5. (May 2020) - Ambry Genetics, based in Aliso Viejo, California, has reported a data breach involving nearly 233,000 people. In its statement, the company said it identified “unauthorized...more
The U.S. Centers for Disease Control and Prevention (CDC) has issued Interim Guidance for Administrators of U.S. Institutions of Higher Education and for K-12 schools and childcare programs, asking them to collaborate and...more