Rebecca Williams on Corporate Counsel

The Clock Is Ticking: HIPAA Small Breach Notifications Due March 1

HIPAA-covered entities must notify the U.S. Department of Health and Human Services Office for Civil Rights (OCR) of "small" breaches of unsecured protected health information that were discovered during calendar-year 2022 no...more

2/24/2023 / Corporate Counsel , Cybersecurity , Data Breach , Data Privacy , Data Protection , Data Security , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , OCR , PHI

HIPAA Small Breach Notifications Due March 1

March 1, 2018 is the date by which HIPAA covered entities must notify the U.S. Department of Health and Human Services Office for Civil Rights (OCR) of “small” breaches of unsecured protected health information that were...more

2/13/2018 / Corporate Counsel , Data Breach , Health Care Providers , Health Insurance Portability and Accountability Act (HIPAA) , Notification Requirements , OCR , PHI , Popular

Tick Tock Tick Tock, When a Breach Occurs, You’re on the Clock!

As a reminder that state attorneys general have enforcement authority over breach notifications, the New York Attorney General recently announced a $130,000 settlement for a failing to provide breach notification in a...more

7/6/2017 / Corporate Counsel , Data Breach , Data Protection , Data Security , Department of Health and Human Services (HHS) , Notification Requirements , OCR , Personally Identifiable Information

A Draft Won’t Do: OCR Settles with CardioNet $2.5m for Failing to Finalize Policies and Procedures

On April 24, 2017, the Department of Health and Human Services’ Office for Civil Rights (“OCR”) announced that CardioNet, a provider of remote mobile monitoring and rapid response services to patients at risk for cardiac...more

5/3/2017 / Business Associates , Corporate Counsel , Covered Entities , Data Breach , Data Protection , Health Insurance Portability and Accountability Act (HIPAA) , OCR , PHI

Second CMP Assessed for HIPAA Violations: Do You Know Where Your Data Is?

For only the second time in its history, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) has imposed a civil money penalty (CMP) on a covered entity for allegedly violating the HIPAA...more

2/10/2016 / Administrative Law Judge (ALJ) , Civil Monetary Penalty , Corporate Counsel , Covered Entities , Department of Health and Human Services (HHS) , Health Insurance Portability and Accountability Act (HIPAA) , OCR , PHI , Privacy Rule

Premera Cyber-Attack Announced: Defining Your Obligations as an Employer

On March 17, 2015, Premera announced a data breach involving the personal information of more than 11 million individuals resulting from what it characterized as a sophisticated, targeted cyber-attack. Employers and plan...more

3/19/2015 / Breach Notification Rule , Corporate Counsel , Cyber Attacks , Data Breach , Employer Liability Issues , Health Insurance Portability and Accountability Act (HIPAA) , Popular , Premera Blue Cross

Employers: What the Anthem Breach Means to You

On Feb. 4, 2015, Anthem announced a data breach involving the personal information of more than 80 million individuals resulting from what it characterized as a sophisticated, targeted cyber-attack. Group health plans may be...more

2/10/2015 / Anthem Insurance , Best Practices , Breach Notification Rule , Corporate Counsel , Cyber Attacks , Cybersecurity , Health Insurance Portability and Accountability Act (HIPAA) , Personally Identifiable Information

Rebecca Williams

Davis Wright Tremaine LLP

Popular Topics by This Author

Latest Posts › Corporate Counsel