The amended rules follow the Biden Administration’s “whole of government” approach to maximizing notifications to executive agencies of cybersecurity events.
On December 21, 2023, a divided Federal Communications...more
1/4/2024
/ Amended Rules ,
Biden Administration ,
Breach Notification Rule ,
Broadband ,
Critical Infrastructure Sectors ,
Cyber Incident Reporting ,
Cybersecurity Information Sharing Act (CISA) ,
Data Breach ,
FCC ,
Personally Identifiable Information ,
Telecommunications
Ninth hearing on Competition and Consumer Protection in the 21st century highlights challenges of addressing persistent threats to data security.
On December 11 and 12, the Federal Trade Commission (the FTC or the...more
HHS OCR issues checklist, iterative guidance in wake of WannaCry and Petya attacks; Anthem breach settlement provides additional lessons.
Key Points:
..Healthcare organizations are particularly vulnerable to ransomware...more
7/11/2017
/ Business Associates ,
Covered Entities ,
Cyber Attacks ,
Cyber Incident Reporting ,
Data Breach ,
Department of Health and Human Services (HHS) ,
Guidance Update ,
Health Care Providers ,
Incident Response Plans ,
OCR ,
Popular ,
Ransomware ,
Risk Management ,
Security and Privacy Controls
Hacking of organisations’ systems is becoming increasingly commonplace, even with advancements in security practices. To mitigate risk, a company must have an enterprise-level, cross-functional incident response plan that is...more
In a stunning victory, an administrative law judge has recommended the dismissal of a long-pending US Federal Trade Commission (FTC) complaint against LabMD, Inc. (LabMD). In a strongly worded opinion in a case that had...more
Alleged HIPAA Violations Resulted from Medical Center’s Failure to Risk Assess Internet-Based Document Sharing Application and Inadequate Breach Response.
The US Department of Health and Human Services (HHS) Office for...more
9/2/2015
/ Business Associates ,
Cloud Computing ,
Covered Entities ,
Data Breach ,
Data-Sharing ,
Department of Health and Human Services (HHS) ,
Electronic Medical Records ,
Enforcement Actions ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Hospitals ,
OCR ,
Patient Confidentiality Breaches ,
PHI ,
Risk Management ,
Security Breach
The State of California, long the most proactive U.S. state in enacting data privacy laws, has again modified its breach notification and data protection laws. This week, Governor Jerry Brown signed two privacy bills into...more
“It is often said that there are two kinds of companies out there — those that have suffered a data breach and those that will have one,” said Latham & Watkins partner Kevin Boyle. “So it makes a lot of sense to be prepared...more