News & Analysis as of May 7, 2025

New Guidance

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Key Messaging from ‘Aging Technology, Emerging Threats: Examining Cybersecurity Vulnerabilities in Legacy Medical Devices’

Morgan Lewis on 4/10/2025

On April 1, 2025, the subcommittee on Oversight and Investigations of the House Committee on Energy and Commerce held a hearing on cybersecurity vulnerabilities in legacy medical devices. The hearing was largely a...more

HHS Releases Cybersecurity Performance Goals for Healthcare Organizations

Bass, Berry & Sims PLC on 1/30/2024

In response to the number of successful, large-scale ransomware attacks affecting healthcare organizations nearly tripling since 2018, the Department of Health and Human Services (HHS) has released guidance outlining its...more

HHS Publishes Roadmap of New Strategy for Cybersecurity in the Healthcare Sector

Proskauer - Health Care Law Brief on 12/8/2023

The U.S. Department of Health and Human Services (HHS) recently issued a strategy paper highlighting key aspects of its plan to revamp cybersecurity requirements in the healthcare industry. Citing a 93% increase in large data...more

Reviewing Online Tracking Technologies Could Keep HIPAA-Regulated Entities Out of Hot Water

Woods Rogers on 4/4/2023

A patient surfs a hospital system’s website and reads an article about depression and anxiety. The patient then searches the hospital’s website for mental health providers in the area. A few hours later, the patient logs into...more

HHS releases health care cybersecurity guide

Orrick, Herrington & Sutcliffe LLP on 3/24/2023

On March 8, the Department of Health and Human Services (HHS) released a cybersecurity implementation guide to assist public and private health care sectors prevent cybersecurity incidents. The Cybersecurity Framework...more

Cybersecurity and HIPAA: Government Issues New Warning and Guidance in Wake of Increased Threats

Holland & Hart LLP on 6/15/2021

The U.S. Department of Health and Human Service’s Office for Civil Rights in Action (OCR) issued a warning that cybercriminals are attempting to exploit a critical vulnerability in VMware software. This alert originates from...more

OFAC Issues Advisory on Ransomware Payments

Snell & Wilmer on 11/19/2020

On October 1, 2020, the U.S. Treasury’s Office of Foreign Assets Control (OFAC) issued an advisory regarding the potential sanctions risk for entities that facilitate ransomware payments. OFAC defined “ransomware” as: A form...more

U.S. Cybersecurity Organizations Issue Warning on Ransomware Activity Targeting Healthcare with Guidance Applicable to All...

Foley & Lardner LLP on 10/30/2020

On October 28, 2020, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the U.S. Department of Health and Human Services (HHS) issued a joint warning that they...more

New HIPAA Guidance for Medical App Developers

Holland & Knight LLP on 4/23/2019

The federal Department of Health and Human Services' Office for Civil Rights, which enforces HIPAA, maintains a website with very helpful "frequently asked questions" (FAQs) regarding the HIPAA Privacy Rule and Security Rule....more

HHS Issues Practical New Cybersecurity Guidance for Healthcare Businesses of all Sizes

Stoel Rives - Health Law Insider® on 3/7/2019

In late January, the U.S. Department of Health and Human Services’ Healthcare & Public Health Sector Coordinating Council issued a new cybersecurity guidance document for healthcare businesses of all sizes. The guidance...more

New Cybersecurity Threat Identification and Prevention Guidance from HHS

Sands Anderson PC on 2/5/2019

As a result of ongoing efforts under the Cybersecurity Act of 2015, the Department of Health and Human Services (HHS) has partnered with public and private sector entities to develop guidance for healthcare entities seeking...more

Privacy & Cybersecurity Update - January 2019

Skadden, Arps, Slate, Meagher & Flom LLP on 2/2/2019

In this month's edition, we examine cybersecurity-related state Supreme Court rulings in Pennsylvania, Vermont and Illinois; the Department of Health and Human Services' cybersecurity guidelines for the health care industry;...more

HHS Issues Cybersecurity Practices for Health Care Industry

Robinson+Cole Health Law Diagnosis on 1/9/2019

Just before the new year, the Department of Health and Human Resources (HHS) released voluntary cybersecurity practices for health care organizations, which consists of a main document, two technical volumes, and resources...more

Privacy and Security Round-up – Colorado Data Breach Law, Guidance from OCR

Mintz - Health Care Viewpoints on 6/21/2018

Privacy and security compliance obligations for health care companies remain hot topics this spring. Health care companies must now contend with data breach laws in all 50 states as well as keeping on top of federal HIPAA...more

Confusing Joint Guidance published by OCR and FTC on HIPAA Authorization Forms

Robinson+Cole Data Privacy + Security Insider on 11/4/2016

There are arguments that there is a dearth of guidance by both the Office for Civil Rights (OCR) and Federal Trade Commission (FTC), so when guidance comes out, we listen. But the most recent guidance jointly issued by the...more

HHS Publishes New Guidance on HIPAA and Cloud Computing

Stinson LLP on 10/27/2016

The U.S. Department of Health and Human Services Office for Civil Rights (OCR) has issued a new guidance regarding HIPAA compliance and the use of cloud computing solutions. The guidance is intended to assist covered entities...more

Guidance on Ransomware Attacks under HIPAA and State Data Breach Notification Laws

McDermott Will & Emery on 8/8/2016

The US Department of Health and Human Services (HHS) has recently issued guidance under the Health Insurance Portability and Accountability Act (HIPAA) on what covered entities and business associates can do to prevent and...more

Cybersecurity News & Notes – July 2016 #3

Foley Hoag LLP - Security, Privacy and the... on 7/19/2016

In Case You Missed It: Court certifies class in suit against Apple. On July 15, 2016, U.S. District Judge Jon S. Tigar certified a class of users of the mobile app Path, who allege that Apple facilitated the app’s access...more

18 Results

View per page

Page: of 1

Cybersecurity › Department of Health and Human Services (HHS) › New Guidance

"My best business intelligence, in one easy email…"