News & Analysis as of

Covered Entities Personal Information Health Insurance Portability and Accountability Act (HIPAA)

Health Care Compliance Association (HCCA)

Recognized Security Practices ‘Saved’ Covered Entity $60K of $300K Fine, But Which Ones Remain a Mystery

Covered entities (CEs) and business associates (BAs) may receive a “discount” for having recognized security practices (RSPs) in place when the HHS Office for Civil Rights (OCR) calculates financial penalties for Security...more

Jones Day

Here We Go Again: U.S. Congress Reintroduces New Comprehensive Federal Privacy Law

Jones Day on

With the bipartisan, bicameral proposed American Privacy Rights Act of 2024, the U.S. Congress seeks to adopt the first national personal data privacy and security law that would preempt comprehensive state privacy laws....more

Moore & Van Allen PLLC

New OCR Guidance on Tracking Technologies

Moore & Van Allen PLLC on

On March 18, 2024, the Office for Civil Rights ("OCR") at the U.S. Department of Health and Human Services ("HHS") published updated guidance on the use of online tracking technologies by HIPAA covered entities and business...more

Latham & Watkins LLP

Recently Enacted Health Data Privacy Laws in Washington and Nevada Pose Challenges for Businesses

Latham & Watkins LLP on

Washington State and Nevada have now passed health data privacy laws that impose obligations relating to the collection, processing, and sharing of “consumer health data.” Both laws (collectively, State Health Data Privacy...more

Sheppard Mullin Richter & Hampton LLP

State Comprehensive Privacy Laws – Beaver State Makes a Dozen

Oregon’s governor has now signed into law the state’s comprehensive privacy law. Meaning, there are now 12 states with these laws, six of which were passed just this year (others passed in 2023 were Iowa, Indiana, Tennessee,...more

BCLP

Comparison of the CCPA & CPRA with Pending 2021 Comprehensive Federal Privacy Legislation - S. 1494

BCLP on

In the last year, we continued to see a shift in the privacy landscape of the United States, including the passage of comprehensive privacy legislation in both Virginia and Colorado, while other states still have bills under...more

Steptoe & Johnson PLLC

New HIPAA Guidance from OCR on COVID-19 Vaccines and the Workplace

Steptoe & Johnson PLLC on

The U.S. Department of Health and Human Services Office for Civil Rights (“OCR”) issued guidance regarding the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) privacy rule (the “Privacy Rule”) in the...more

Hogan Lovells

New York State Expected to Increase Enforcement of Cybersecurity Practices

Hogan Lovells on

Companies should take note of two imminent developments in New York in the area of cybersecurity regulation: enforcement of the New York Department of Financial Services (NYDFS) Cybersecurity Regulation (Regulation) and the...more

McDermott Will & Emery

Inconsistent HIPAA and CCPA De-Identification Standards Create Compliance Challenges

McDermott Will & Emery on

A potential disconnect between the HIPAA de-identification standard and California Consumer Privacy Act (CCPA) definition of de-identified may pose hurdles for HIPAA covered entities, their business associates and other data...more

9 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide