Report on Patient Privacy 21, no. 10 (October, 2021) - A massive data breach at University of New Mexico (UNM) Health may have allowed a third party to obtain medical records from more than 600,000 patients—more than a...more
In 2018, we published an article on Walgreens’ use of session replay scripts and how such use could lead to an accidental data breach under HIPAA. Last week, an article in Vox explained how Walgreens was again apparently...more
Report on Patient Privacy 20, no 5. (May 2020) - Ambry Genetics, based in Aliso Viejo, California, has reported a data breach involving nearly 233,000 people. In its statement, the company said it identified “unauthorized...more
Report on Patient Privacy 20, no. 3 (March 2020) - As the new coronavirus, COVID-19, spreads across the United States, the HHS Office for Civil Rights (OCR) is reminding HIPAA covered entities and business associates that...more
This past June, leaders from health systems, outpatient services companies, health insurers, IT and equipment suppliers, health retailers, home care providers, pharmaceutical companies, and investors gathered in Chicago for...more
The Telephone Consumer Protection Act (“TCPA”) was enacted to protect consumers from intrusive robocalls, but Congress probably did not foresee that it would result in a windfall for plaintiff’s lawyers. Virtually every...more
Recently, the Indiana Court of Appeals let stand a $1.4 million jury verdict against a national pharmacy chain for its employee pharmacist’s unauthorized disclosure of a customer’s confidential medical records. Given the...more
You may already have read the scintillating facts surrounding a jury award of $1.44 million (recently challenged unsuccessfully on appeal) against Walgreen Co. (Walgreens) following its pharmacist’s alleged inappropriate...more
Although HIPAA does not create a private cause of action, a recent Indiana Superior Court jury verdict demonstrates that HIPAA still could play an important role in private causes of action in state court based on negligence...more
Although HIPAA does not create a private cause of action, a recent Indiana Superior Court jury verdict indicates that HIPAA could still play an important role in private causes of action in state court based on negligence and...more