News & Analysis as of May 1, 2025

Cybersecurity › Health Insurance Portability and Accountability Act (HIPAA) › Cybersecurity Framework

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Best Practices to Secure Law Firm Documents

U.S. Legal Support on 1/27/2025

Law firms handle confidential information and documents that require diligent protection. The stakes are high, the regulations and their sources are vast, and technology is sophisticated and ever-changing....more

Coming This December: Will Health Care Entities Be Unwrapping New HIPAA Security Rules for the Holidays?

Alston & Bird on 11/1/2024

Our Health Care and Privacy, Cyber & Data Strategy Groups cover an upcoming proposed rule from U.S. Health and Human Services (HHS) that would formalize cybersecurity requirements and allow the Office for Civil Rights (OCR)...more

What is an Information Security Framework and Why Do I Need One?

J.S. Held on 6/7/2023

An information security framework, when done properly, will allow any security leader to more intelligently manage their organization's cyber risk. The framework consists of a number of documents that clearly define the...more

Is Federal Cyber Policy About to Make a U-Turn? Notes from #CES Suggest It Might.

Wiley Rein LLP on 1/16/2023

For years, federal cyber policy has been based on successful public-private partnerships, collaboration, and the promotion of voluntary standards that can be tailored to sector and organization-specific risk and needs....more

New Connecticut Law Incentivizes Adoption of Cybersecurity Standards

Fox Rothschild LLP on 11/2/2021

In July, Connecticut passed a largely unnoticed new law that followed in the footsteps of Ohio and Utah in limiting damages or creating affirmative defenses for business that experience a data breach after implementing a...more

Jones Day Global Privacy & Cybersecurity Update | Vol. 28

Jones Day on 8/10/2021

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - President Biden Issues Cybersecurity Executive Order - On May 12, 2021, President Biden issued an executive order that placed new standards on the...more

Jones Day Global Privacy & Cybersecurity Update | Vol. 24

Jones Day on 1/10/2020

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - FTC Submits Comment on the Preliminary Draft for the NIST Privacy Framework - On October 24, 2019, the Federal Trade Commission ("FTC") announced that...more

OCR Provides Insight into Enforcement Priorities and Breach Trends

Hogan Lovells on 10/22/2019

Regulators, industry experts, and researchers provided insight into health privacy and security enforcement trends, emerging threats, and new tools at a recent conference focused on the Health Insurance Portability and...more

Jones Day Global Privacy & Data Security Update | Vol. 20

Jones Day on 12/26/2018

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - NIST Releases Internal Report Regarding IoT Cybersecurity - In September, the National Institute of Standards and Technology ("NIST") released a draft...more

Ohio Passes Law Providing Safe Harbor for Businesses Suffering Data Breach

Robinson+Cole Data Privacy + Security Insider on 9/24/2018

The Ohio legislature recently passed S.B. 220, which gives businesses that suffer a data breach an affirmative defense against tort claims brought in class action suits....more

Data Privacy + Cybersecurity Insider - February 2018 #3

Robinson & Cole LLP on 2/16/2018

As of February 15, 2018, banks, insurance companies, and other financial services institutions and licensees regulated by the New York Department of Financial Services (DFS) are required to file their first certification of...more

Global Privacy & Cybersecurity Update Vol. 15

Jones Day on 9/15/2017

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - FTC Comments on Improvements to IoT Device Security - On June 19, the Federal Trade Commission ("FTC") submitted comments to a working group organized by the...more

New York’s New Cybersecurity Regulations and its Impact on your Sensitive Health Information

Farrell Fritz, P.C. on 8/8/2017

Effective March 1, 2017, the New York State Department of Financial Services promulgated regulations to help protect against cybercriminals and their efforts to exploit sensitive electronic data. These cybersecurity...more

Global Privacy & Cybersecurity Update Vol. 13

Jones Day on 3/15/2017

On December 28, 2016, the New York Department of Financial Services ("DFS") released a revised version of a proposed regulation that would require banks, insurance companies, and other financial services institutions...more

"Privacy & Cybersecurity Update - January 2017"

Skadden, Arps, Slate, Meagher & Flom LLP on 2/4/2017

In this edition of our Privacy & Cybersecurity Update, we discuss how the prospect of a new chair and three new commissioners at the FTC may impact the agency's approach to cybersecurity regulation, a new Massachusetts...more

What Did They Say About Cybersecurity in 2016? 8 Proclamations from Regulators and the Courts

Orrick, Herrington & Sutcliffe LLP on 1/30/2017

There is no such thing as compliance with the NIST Cybersecurity Framework (FTC). In September, the FTC dispelled a commonly held misconception regarding the NIST Framework: It “is not, and isn’t intended to be, a standard or...more

Blog: HHS Releases Crosswalk Between HIPAA Security Rule and NIST Framework

Cooley LLP on 3/9/2016

The U.S. Department of Health and Human Services (HHS), Office of Civil Rights (OCR) recently released a “crosswalk” developed with the National Institute of Standards and Technology (NIST) mapping the Health Insurance...more

Security Frameworks 101: Which is Right for my Organization?

Robinson+Cole Data Privacy + Security Insider on 9/1/2015

These days information security is on the minds of virtually all technology professionals and business executives alike. But how does an organization ensure that their security profile is adequate. It can certainly help to...more

Cloud Computing: Healthcare Issues in a Digital Age – (Part Two)

Winstead PC on 9/30/2013

Hospitals and health care providers must often look to third party vendors offering cloud computing solutions, but are these companies well-prepared to meet the HIPPA/HITECH Act privacy and security requirements as well as...more

19 Results

/

View per page

Page: of 1