On 12 September 2024, the Office of Research Integrity (ORI) within the US Department of Health and Human Services (HHS) issued a final rule (Final Rule) that significantly modified the standards, procedures, and requirements...more
INTRODUCTION - On 10 December 2020, the Office of Civil Rights (OCR) for the federal Department of Health and Human Services (the Department) issued Proposed Modifications to the HIPAA Privacy Rule to Support, and Remove...more
In this week’s episode, Rebecca Schaefer and Hannah Maroney discuss a string of recent HIPAA enforcement actions which demonstrate that the HHS Office of Civil Rights (OCR), the agency tasked with enforcing HIPAA, is...more
8/20/2020
/ Business Associates ,
Business Associates Agreement (BAA) ,
Department of Health and Human Services (HHS) ,
Electronic Protected Health Information (ePHI) ,
Encryption ,
Enforcement Actions ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
HIPAA Privacy Rule ,
HIPAA Security Rule ,
Hospitals ,
OCR ,
Parent Corporation ,
PHI ,
Policies and Procedures ,
Settlement Agreements ,
Third-Party Service Provider
INTRODUCTION - The U.S. Department of Health and Human Services (HHS) and its operating and staff divisions (HHS Divisions) have granted an unprecedented amount of regulatory flexibility to aid health care providers in their...more
In the context of an evolving COVID-19 response, there have between two notable regulatory developments relating to the Health Insurance Portability and Accountability Act (“HIPAA”) since the guidance issued by the Department...more
The U.S. Department of Health and Human Services recently released a notice of enforcement discretion announcing changes in how the agency will assess civil monetary penalties for violations of the Health Insurance...more
5/9/2019
/ Civil Monetary Penalty ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Health and Human Services (HHS) ,
Enforcement Actions ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HITECH Act ,
Interim Final Rules (IFR) ,
Patient Privacy Rights
Hospitals and health systems play a central role in helping to address the opioid crisis. Even before increased national attention, hospitals were developing policies, protocols, and procedures for opioid prescribing best...more