Updates to Statute 1557 that Healthcare Providers Need to Know
Privacy and Healthcare Business Associates with Isabella Porter
State Law Privacy Video Series | Healthcare Entities and Health Data
Gerry Blass on Healthcare Vendor Risk Management
AGG Talks: Technology - In the Balance: Interoperability and Security
Is Your Practice's Marketing HIPAA Compliant?
Relaxed HIPAA Restrictions For Providers Using Telehealth
Compliance Perspectives: Permissible Disclosures under HIPAA, Especially in the Time of COVID-19
Polsinelli Podcasts - Confusion to Clarity on the Future of the 340B Program
Polsinelli Podcast - HIPAA Changes Overview
In November 2023, the New York Department of Financial Services (NYDFS) issued its second amendment to its "Cybersecurity Requirements for Financial Services Companies (the Cybersecurity Regulation or Part 500). This was the...more
Covered entities regulated by the New York State Department of Financial Services (NYDFS) must submit cybersecurity compliance forms by April 15, 2025. New sets of requirements for system monitoring and access privileges,...more
As we previously reported, in 2023 the New York State Department of Financial Services (NYDFS) amended its cybersecurity regulation, 23 NYCRR 500 (or Part 500). As of November 1, 2024, Class A Companies and Covered Entities...more
On February 27, NYDFS reminded covered entities subject to the Cybersecurity Regulation to submit their annual compliance notifications for the 2024 calendar year. Covered entities must submit the compliance filing by April...more
As previously reported, on December 26, 2024, the Fifth Circuit first lifted—and then reinstated—a preliminary nationwide injunction staying the Corporate Transparency Act’s (“CTA”) reporting requirements pending appeal....more
On Friday, December 27, 2024, the Justice Department issued a final rule to address “urgent national security risks posed by access to U.S. sensitive personal and government-related data from countries of concern and covered...more
Last year, as we previously reported, California Governor Newsom signed into law Senate Bill 54, Fair Investment Practices by Investment Advisers, which requires “covered entities,” defined as a “venture capital company” that...more
Proposed cybersecurity regulation may face changes or challenges in view of the incoming Trump administration that is intent on reducing the perceived regulatory burden on American companies and streamlining government...more
On June 29, 2024, California Governor Gavin Newsom signed into law S.B. 164 (the “Diversity Reporting Law”), amending the previous version of the law that was adopted in 2023, S.B. 54. Please visit the following link for our...more
On October 16, 2024, the New York State Department of Financial Services (DFS) issued an industry letter providing guidance on how DFS-regulated entities (covered entities) should be evaluating and responding to artificial...more
On June 21, 2024, the Treasury Department released long-expected proposed regulations to curtail investments by U.S. persons (including investments by U.S. limited partners in non-U.S. pooled funds) and U.S.-controlled...more
Few aspects of the healthcare regulatory apparatus evoke more confusion and dread for healthcare practitioners than the National Practitioner Data Bank (NPDB or Data Bank). Being reported to the Data Bank is often regarded...more
The CFPB has issued a final rule to provide transparency and track certain covered nonbank offenders. On June 3, 2024, the CFPB introduced a significant regulatory measure known as the Registry of Nonbank Covered Persons...more
A significant shift in cybersecurity compliance is on the horizon, and businesses need to prepare. Starting in 2024, organizations will face new requirements to report cybersecurity incidents and ransomware payments to the...more
On Thursday, June 13, the next installment of Rivkin Radler’s Healthcare Compliance Lunch & Learn series, will be presented by Rivkin Radler Partner Ashley Algazi and moderated by Robert Hussar. The program, “Conducting HIPAA...more
On May 16, 2024, the Securities and Exchange Commission (SEC) announced the adoption of amendments to Regulation S-P (Reg S-P), which broadly track the changes originally proposed in March 2023. The revised Reg S-P requires...more
On April 9, 2024, the Department of the Treasury (“Treasury”) and the Internal Revenue Service (the “IRS”) issued two sets of proposed Treasury Regulations related to section 4501, REG-115710-22, which provides guidance on...more
The Commodity Futures Trading Commission ("CFTC") published a final rule on April 30, 2024, altering how covered entities fulfill their large trader reporting obligations ("the LTR Rule") and granting CFTC staff significant...more
On April 4, the Cybersecurity and Infrastructure Security Agency published a notice of proposed rulemaking setting out mandatory reporting requirements for covered entities that experience cybersecurity incidents or make...more
On April 4, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published its much-anticipated Notice of Proposed Rule Making for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)....more
CISA's proposed rules will require organizations operating in U.S. critical infrastructure sectors to report cyber incidents within 72 hours and ransom payments within 24 hours. ...more
Most businesses in the United States will have to file incident reports—including for ransomware payments—under the Proposed Rule. The Department of Homeland Security has the authority to issue subpoenas and even penalties...more
On March 15, 2022, the Cyber Incident Reporting for Critical Infrastructure Act of 2022 was signed into law. Generally, CIRCIA requires “covered entities,” defined as entities in certain critical infrastructure sectors, to...more
A sweeping array of businesses are another step closer to requirements to report cybersecurity incidents and ransomware payments to the federal government. On April 4, 2024, the U.S. Department of Homeland Security's (DHS)...more
On the 2nd of April, a pivotal legislative proposal, bill of law number 8370, was introduced in the Luxembourg Parliament to transpose the Corporate Sustainability Reporting Directive (CSRD) into national law. The CSRD will...more