Data Breach, Notice Requirements

Cyber Risk Insurance May Cost More Than You Think

by Thomas Caswell, III | Zelle Hofmann Voelbel & Mason LLP on 5/9/2013

Since 2003, all but four states have enacted laws concerning data breaches and the protection of consumers’ personal information. This regulation of electronic data containing personal information and the protection of such...more

Breach of Privacy in the Cloud (Canada)

by Field Law on 4/12/2013

When a cloud privacy breach occurs in Canada, what happens? In some cases, businesses are subject to mandatory breach notification requirements. This means that a privacy breach - whether as a result of a hacker, a lost USB...more

The HIPAA Omnibus Final Rule—Data Privacy and Security Implications for Business Associates and Covered Entities

by Matthew Fischer | Sedgwick LLP on 4/11/2013

On January 17, 2013, the Office for Civil Rights (‘‘OCR’’) of the U.S. Department of Health and Human Services (‘‘HHS’’) published the HIPAA Omnibus Final Rule (‘‘Final Rule’’) which OCR has trumpeted as carrying ‘‘the most...more

HIPAA’S FINAL RULE: Putting Things in Perspective – Comments from OCR

by Patricia Shea | K&L Gates LLP on 4/2/2013

On March 22, 2013, Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) Director Leon Rodriguez presented the keynote address to attendees of the American Health Lawyers’ Association HIPAA/HITECH Conference in...more

Privacy Changes Coming to China

by Gabriel Bloch, Jingxiao Fang, Paul D. McKenzie, Miriam Wugmeister | Morrison & Foerster LLP on 3/28/2013

Originally published in Privacy & Security Law on 03/18/2013. There is continued focus in China on privacy and data security issues. China still has no omnibus law, but it has promulgated some sector-specific...more

Safeguards against Data Security Breaches (Part One) [Video]

by Robert Brownstone | Fenwick & West LLP on 3/19/2013

With data security breaches dominating the headlines and a rising number of employees taking advantage of BYOD, or bring your own device to work policies, businesses have found themselves vulnerable to targets by hackers,...more

What We Need to Do to Comply with the Final HIPAA Rule: A Summary of the Privacy Obligations for Health Care Providers, Health...

by Cheryl Murray | Winstead PC on 3/19/2013

On January 25, 2013, the U.S. Department of Health and Human Services (HHS) published the highly anticipated Omnibus Rule, which makes extensive changes (as promulgated by the Health Information Technology for Economic and...more

European Parliament Committee on Industry, Research and Energy publish opinion on the proposed General Data Protection Regulation

by Cynthia O'Donoghue | Reed Smith on 3/15/2013

Following the lead of the Committee on Civil Liberties, Justice and Home Affairs (LIBE), which already released its draft report (see our prior blog), 20 February, the European Parliament Committee on Industry, Research and...more

HITECH and HIPAA: The Final Rule

by Joshua Freemire, Sarah E. Swank, James Wieland | Ober|Kaler on 3/14/2013

The final rule implementing new obligations under HITECH and changing obligations under HIPAA is finally out. Covered entities and business associates need to come into compliance with these requirements by September 23,...more

Don't Get Pinched by New HHS PHI Rules

by Baker, Donelson, Bearman, Caldwell &... on 3/11/2013

HHS has released its much-anticipated final omnibus rule about protected health information. The rule addresses privacy and security issues, including defining a business associate and expanding individuals' rights to...more

Highlights of the Omnibus HIPAA/HITECH Final Rule

by Robert Chu, William Conaboy, Gregory Fliszar, Katherine Layman, Judy Mayer | Cozen O'Connor on 3/7/2013

On January 25, 2013, the Office of Civil Rights (OCR) of the Department of Health & Human Services (HHS) published the long-awaited omnibus final regulation governing health data privacy, security and enforcement (Omnibus...more

Final Omnibus Rule modifies HIPAA Privacy, Security and Enforcement Rules

by Calvin Hayes | Fowler White Boggs P.A. on 3/5/2013

On January 25, 2013, the Final Rule modifying the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Enforcement Rules was published in the Federal Register. Among other things, the omnibus...more

Final HIPAA/HITECH Rules: Compliance Actions for Employee Benefit Plans

by Hugh Davis, Kathryn Paradise | Poyner Spruill LLP on 3/5/2013

The Department of Health and Human Services recently released final regulations modifying the HIPAA Privacy, Security Breach Notification and Enforcement Rules (the “Omnibus Rule”). These regulations have far-reaching effects...more

Special Edition: Health Law Update - February 28, 2013

by Anne Foster, Cory Fox, Susan Whittaker Hughes, Theodore Kobus III, Jennifer Mills, John Mulhollan, Lynn Sessions, Kimberly M. Wong | BakerHostetler on 3/1/2013

In This Issue: - A Baker's Dozen of Significant Changes From the HIPAA/HITECH Rule 1. Business Associates and Subcontractors 2. Breach Notification 3. Covered Entity Organizational Structures 4. Cloud...more

PHI Breach Reporting Deadline is March 1, 2013

by Thompson Coburn LLP on 2/28/2013

To comply with the HITECH breach notice requirements, HIPAA covered entities are required to report all small breaches of unsecured protected health information (“PHI”) that occurred in calendar year 2012 to the U.S....more

Significant Changes to HIPAA Effective March 26, 2013

by Christie Burbank, Jade Dodds, Susan Steelman | Miller & Martin PLLC on 2/28/2013

The following is a summary of the major changes to HIPAA under the new Final Rule: 1. Breach Notification Standard Lowered — In perhaps the most significant change under the Final Rule, the new regulations considerably...more

Deadline Approaches for Reporting 2012 Small Breaches

by Adam H. Greene, Rebecca L. Williams | Davis Wright Tremaine LLP on 2/26/2013

HIPAA covered entities have through Friday, March 1, 2013, to report small breaches of unsecured protected health information that occurred in calendar year 2012 to the U.S. Department of Health and Human Services (HHS). A...more

New HIPAA Omnibus Regulations – What Employers Who Sponsor Group Health Plans Need to Know to Comply

by Denise L. Atwood | Snell & Wilmer L.L.P. on 2/22/2013

On January 25, 2013, the Department of Health and Human Services (HHS) published final regulations that modify the Privacy, Security, Enforcement and Breach Notification Rules issued pursuant to the Health Insurance...more

New FAR Rules Likely For "Critical Infrastructure" Contractors

by Eric Aaserud | Perkins Coie on 2/22/2013

On February 12, 2013, President Obama signed an Executive Order (the Order) intended to enhance the cybersecurity of the country's critical infrastructure. According to the Order, "[t]he cyber threat to critical...more

OCR Issues Final Modifications to the HIPAA Privacy, Security, Breach Notification and Enforcement Rules to Implement the HITECH...

by Bernadette Broccolo, Jennifer S. Geetter, Daniel F. Gottlieb, Amy Hooper Kearbey, Edward Zacharias | McDermott Will & Emery on 2/21/2013

On January 25, 2013, the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services (HHS) published a final rule (Final Rule) containing modifications to the privacy standards (Privacy Rule), security...more

Home

Legal News

Find a Lawyer

Browse Subjects

Subscribe

Pro Services

For Reporters

Data Breach › Notice Requirements

Cyber Risk Insurance May Cost More Than You Think

Breach of Privacy in the Cloud (Canada)

The HIPAA Omnibus Final Rule—Data Privacy and Security Implications for Business Associates and Covered Entities

HIPAA’S FINAL RULE: Putting Things in Perspective – Comments from OCR

Privacy Changes Coming to China

Safeguards against Data Security Breaches (Part One) [Video]

What We Need to Do to Comply with the Final HIPAA Rule: A Summary of the Privacy Obligations for Health Care Providers, Health...

European Parliament Committee on Industry, Research and Energy publish opinion on the proposed General Data Protection Regulation

HITECH and HIPAA: The Final Rule

Don't Get Pinched by New HHS PHI Rules

Highlights of the Omnibus HIPAA/HITECH Final Rule

Final Omnibus Rule modifies HIPAA Privacy, Security and Enforcement Rules

Final HIPAA/HITECH Rules: Compliance Actions for Employee Benefit Plans

Special Edition: Health Law Update - February 28, 2013

PHI Breach Reporting Deadline is March 1, 2013

Significant Changes to HIPAA Effective March 26, 2013

Deadline Approaches for Reporting 2012 Small Breaches

New HIPAA Omnibus Regulations – What Employers Who Sponsor Group Health Plans Need to Know to Comply

New FAR Rules Likely For "Critical Infrastructure" Contractors

OCR Issues Final Modifications to the HIPAA Privacy, Security, Breach Notification and Enforcement Rules to Implement the HITECH...

HIPAA Alert: Action Steps To Reach Compliance

The New HIPAA Omnibus Rule & Your Liability — A Detailed Review

HIPAA Rules Overhaul Ups Compliance Ante

HIPAA Final Omnibus Rule – published Jan. 25, 2013

Breaking Down The HIPAA Rule Changes: Part 3 Of 5 Modifications To The Breach Notification Rule

Safeguards against Data Security Breaches (Part One) [Video]

Expand Your Reach