News & Analysis as of

Risk Assessment Risk Management HIPAA Security Rule

Ogletree, Deakins, Nash, Smoak & Stewart,...

2025 Enforcement Trends: Risk Analysis Failures at the Center of HHS’s Multimillion-Dollar HIPAA Penalties

In the first five months of 2025, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced it had entered into ten Health Insurance Portability and Accountability Act (HIPAA) resolution...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - July 21st - 24th, Nashville, TN

Grounded in the OIG’s General Compliance Program Guidance and DOJ’s Evaluation of Corporate Compliance Programs, our immersive, three-and-a-half-day, classroom-style Healthcare Basic Compliance Academy equips compliance...more

Ankura

HIPAA Security Risk Analysis – How should regulated entities prepare for the Office for Civil Rights (OCR) Risk Analysis Audit...

Ankura on

Following the Office for Civil Rights (OCR) recent publication of four settlements as part of a new Risk Analysis Audit Initiative. We explore the current regulatory language for Risk Analysis, the proposed language for Risk...more

Arnall Golden Gregory LLP

OCR Announces Fifth Settlement Under Its Risk Analysis Initiative

Background - On March 21, 2025, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced a settlement with Health Fitness Corporation (“Health Fitness”), a company that provides wellness...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - March 24th - 27th, Chicago, IL

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

Saul Ewing LLP

Seeing is Believing: A Civil Money Penalty With Warby Parker Following Cybersecurity Incident

Saul Ewing LLP on

On February 20, 2025, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $1.5 million civil money penalty (CMP) against Warby Parker, Inc. (WP). WP is a manufacturer and online...more

McCarter & English, LLP

Season of Enforcement: OCR Announces Its Sixth Enforcement Action of 2025

With 2025 barely three weeks old, the US Department of Health and Human Services Office for Civil Rights (OCR) has already announced six enforcement actions for the new year. Particularly significant is the advancement of...more

Cozen O'Connor

Proposed Changes to the HIPAA Security Rule Will Have a Significant Impact on the Health Care Sector

Cozen O'Connor on

A few days ago, the U.S. Department of Health and Human Services (“HHS”), through its Office for Civil Rights, issued the proposed rule HIPAA Security Rule to Strengthen the Cybersecurity of Electronic Protected Health...more

BakerHostetler

It’s Officially Enforcement Season: OCR Announces First Penalty Under New Risk Analysis Initiative

BakerHostetler on

On October 31, 2024, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) embraced the end of Spooky Season by announcing two more ransomware-related enforcement actions. ...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - January 27th - 30th, Orlando, FL

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

BakerHostetler

6 Important Takeaways for HIPAA Covered Entities and Business Associates from 2024 NIST HHS OCR Conference

BakerHostetler on

On October 23-24, 2024, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) Information Technology Laboratory hosted the Safeguarding...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - December 9th - 12th, San Diego, CA

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - November 18th - 21st, Boston, MA

Ideal for practitioners who want to build strong foundational knowledge of compliance program management in a healthcare setting and how to apply that knowledge in practice. Attendees will come away better prepared to...more

Health Care Compliance Association (HCCA)

[Event] Basic Healthcare Compliance Academy - July 15th - 18th, Charlotte, NC

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - June 3rd - 6th, New Orleans, LA

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Federal Regulators Unveil Revised Final Guidance for Healthcare Cybersecurity and HIPAA Compliance

On February 14, 2024, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a new, final version of their guidance for...more

Foley & Lardner LLP

NIST Publishes Final “Cybersecurity Resource Guide” on Implementing the HIPAA Security Rule

Foley & Lardner LLP on

In an important development for HIPAA-regulated entities looking for practical assistance in understanding, implementing, and enhancing compliance with the HIPAA Security Rule, the National Institute of Standards and...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - March 11th - 14th, Nashville, TN

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - December 11th - 14th, Orlando, FL

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - November 13th - 16th, Denver, CO

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - October 16th - 19th, San Francisco, CA

HCCA’s Healthcare Basic Compliance Academy provides three-and-a-half-days of classroom-style learning that addresses methods for implementing and managing compliance programs based on the Seven Element Approach. Academies...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - September 11th - 14th, Boston, MA

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - July 24th - 27th, New Orleans, LA

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

Health Care Compliance Association (HCCA)

[Event] Healthcare Basic Compliance Academy - June 5th - 8th, San Diego, CA

Designed for professionals with some compliance knowledge and experience, HCCA’s Healthcare Basic Compliance Academy is ideal for practitioners who are ready to support, enhance, and oversee a comprehensive compliance program...more

BakerHostetler

‘Unboxing’ the New NIST Guidance: NIST Publishes Significant Update to Healthcare Cybersecurity Guide

BakerHostetler on

​​​​​​​Without question, healthcare providers and the companies that support them operate in an elevated cybersecurity risk environment. And when a cybersecurity incident occurs, the ensuing regulatory inquiries and/or...more

28 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide