News & Analysis as of May 19, 2025

Health Insurance Portability and Accountability Act (HIPAA)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Security Best Practices for Remote Depositions in the Digital Age

U.S. Legal Support on 3/27/2025

Trial outcomes often hinge on witness testimony. Attorneys collect much of this testimony during a formal process called a deposition. A critical component of discovery, depositions traditionally occur in law offices or...more

Proposed Changes to the HIPAA Security Rule: What Regulated Entities Need to Know

ArentFox Schiff on 2/10/2025

In the final days of the Biden Administration, the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued a notice of proposed rulemaking (NPRM) to modify the Security Rule under the Health...more

Changes Proposed by HHS to Strengthen HIPAA Security Rule

Maynard Nexsen on 2/7/2025

On January 6, 2025, the US Department of Health and Human Services Office for Civil Rights (“OCR”) issued a notice of proposed rulemaking (“Proposed Rule”) containing significant updates to the Security Rule under the Health...more

A Deeper Dive into the Proposed Modifications to the HIPAA Security Rule

Stoel Rives - Global Privacy & Security Blog® on 1/16/2025

“Through December 20, 2024, 575 security incidents involving unsecured protected health information affecting 500 or more individuals had been reported to Health and Human Services. Through the same date in 2023, 265...more

New Year, New HIPAA Security Rule?

Dinsmore & Shohl LLP on 1/9/2025

Citing the “alarming growth” of cyberattacks in recent years, the U.S. Department of Health and Human Services (“HHS”) has issued a Notice of Proposed Rulemaking to modify the Health Insurance Portability and Accountability...more

HHS Proposes Major Revisions to HIPAA Security Rule

Goodwin on 1/8/2025

On December 27, 2024, the Department of Health and Human Services (HHS) issued a notice of proposed rulemaking (NPRM) related to the Security Rule under the Health Insurance Portability and Accountability Act (HIPAA). ...more

Data Privacy and Cybersecurity New Laws and Regulations Report

Paul Hastings LLP on 10/6/2022

Throughout 2022, we continue to see regulators placing an emphasis on the importance of protecting and securing information, in particular consumer personal information, at both the federal and state levels. ...more

A Practical Security Reminder for the COVID-19 Outbreak – Not Just for Remote Workers!

Sands Anderson PC on 3/23/2020

As many businesses and organizations adapt to the impact of COVID-19 on their operations, the systems and data security risks they face continue to increase and must be an area of focus in all planning for COVID-19. While...more

Large New York State Health System Agrees To Pay $3 Million For Its Failure to Repeatedly Encrypt Mobile Devices

Saul Ewing LLP on 11/11/2019

On November 5, 2019, the Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS) announced a $3 million settlement with the University of Rochester Medical Center (URMC) to settle potential...more

Unencrypted Mobile Devices Cost Medical Center $3 Million In HIPAA Settlement

McGuireWoods LLP on 11/8/2019

In one of this year’s largest HIPAA settlements, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) is set to collect $3 million from the University of Rochester Medical Center (URMC). This...more

US Breach Laws Are Coming: Iowa

Sheppard Mullin Richter & Hampton LLP on 12/13/2018

As we approach 2019, companies will want to keep in mind the changes that are coming to various US states’ breach notice laws. On January 1, 2019 Iowa’s law, which has already been amended twice since it was passed in 2008,...more

Summary Judgment: Recent HIPAA Case Emphasizes Encryption, Action on Risk Analysis - AHLA Health Information and Technology...

Bradley Arant Boult Cummings LLP on 8/2/2018

On June 18, 2018, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced that an HHS Administrative Law Judge (“ALJ”) granted summary judgment to OCR in an enforcement action...more

Latest OCR Cybersecurity Newsletter Tackles Mobile Devices

Mintz - Health Care Viewpoints on 11/10/2017

The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) released its October Cybersecurity Newsletter last week with a focus on mobile devices. Given the amount of work conducted on mobile devices...more

Building a Health App? Part 6: HIPAA and Other Privacy and Security Considerations

Mintz - Health Care Viewpoints on 10/26/2017

Consumers are increasingly turning to health apps for a variety of medical and wellness-related purposes. This has in turn caused greater amounts of data—including highly sensitive information—to flow through these apps....more

Significant WiFi vulnerability exposed

Eversheds Sutherland (US) LLP on 10/17/2017

What is the problem? Belgian researchers have published information about a vulnerability in the most popular WiFi encryption protocol that makes monitoring of all communications possible, except those communications that...more

Global Privacy & Cybersecurity Update Vol. 14

Jones Day on 6/5/2017

New York Attorney General Announces Record Number of Data Breach Notices in 2016 - On March 21, 2017, the New York Attorney General's Office announced that it received 1,300 reported data breaches in 2016—a 60 percent...more

2016 Breach Roundup, Part I: U.S. State Data Breach Notification Laws Highlights and Trends

Alston & Bird on 12/6/2016

In many respects, 2016 has been a remarkable year, but one constant with recent history is that multiple states (six this year) amended their breach notification statutes. As is commonly stated, the U.S. ...more

Illinois Joins the Fray: Strengthens its Laws Around Data Breach Notification and Data Security

Mintz - Privacy & Cybersecurity Viewpoints on 6/15/2016

Sophisticated phishing scams and muscular hacking efforts continue to compromise personal and sensitive information held by insurers, hospital systems, and businesses large and small. In response, many states have...more

Tennessee Legislature Amends Data Breach Notification Statute - Encryption is No Longer an Automatic Safe Harbor

Miller & Martin PLLC on 6/15/2016

On March 24, 2016, Governor Haslam signed S.B. 2005 which amends Tennessee's data breach notice statute. The amended statute will go into effect on July 1, 2016. The new Tennessee breach notice requirements are triggered by...more

Tennessee Gives Businesses 45 Days for Data Breach Notice

Davis Wright Tremaine LLP on 4/21/2016

Recent amendments to the State’s data breach statute give a hard deadline for a business to provide consumer notice, removes encryption safe harbor, exempts entities that are subject to the Health Insurance Portability and...more

FTC Enforcement in Schein: Misleading Statements about Encryption and Cybersecurity

Orrick, Herrington & Sutcliffe LLP on 1/26/2016

On January 5, 2015, the Federal Trade Commission (FTC) entered into a consent order with dental software manufacturer Henry Schein Practice Solutions, Inc. ("Schein") in connection with allegations that Schein had made...more

Data-Harvesting Zombie Hackers, Blood-Thirsty Auditors, and Other Reasons to be Scared on Halloween

Mintz - Health Care Viewpoints on 10/30/2015

This Halloween, the scariest monsters might not be in your closet or under your bed. They may be overseas, orchestrating intrusions into your electronic medical record. Or they may be lurking in your own workforce, carrying...more

Recent Enforcement Shows the Importance of Encrypting Mobile Devices Containing Protected Health Information

Foley & Lardner LLP on 9/18/2015

With headlines every day announcing another release of Protected Health Information (PHI), providers are asking themselves – is there a way to protect against these breaches? Beyond improving the security of large...more

Maryland AG settles with Visionworks over security practices

Robinson+Cole Data Privacy + Security Insider on 9/4/2015

Using the Maryland Consumer Protection Act, Maryland Attorney General Brian Frosh has announced that eye care retailer Visionworks, Inc. has agreed to pay the state of Maryland $100,000 and enhance its security measures...more

HIPAA Compliant Technology and the Importance of Encryption

Foley Hoag LLP - Security, Privacy and the... on 2/24/2015

We welcome this guest blog by Gene Fry, Compliance Officer, Scrypt, Inc. The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for protecting sensitive patient data. This means that any...more

28 Results

View per page

Page: of 2

Cybersecurity › Encryption › Health Insurance Portability and Accountability Act (HIPAA)

"My best business intelligence, in one easy email…"