Articles related to HIPAA, Privacy & Security

< back to service

Important Deadlines for HIPAA Covered Entities and Part 2 Programs

[02/26/26]

HIPAA-Regulated Entities Required to Comply with New Rules to Support Reproductive Health Care Privacy by the End of the Year

[08/13/24]

Federal Court Declares Portions of HHS’s Website Tracking Technologies Guidance Unlawful

[06/27/24]

OCR Updates Online Tracking Technologies Bulletin

[03/20/24]

Change Healthcare Cybersecurity Incident – Legal and Operational Considerations for Affected Organizations

[03/18/24]

Long-Awaited Modifications to Part 2 Regulations for “Confidentiality of Substance Use Disorder Patient Records” Finalized

[03/14/24]

OCR Emphasizes the Importance of Sanction Policies for HIPAA Compliance

[11/13/23]

Proposed Changes to the HIPAA Privacy Rule to Support Reproductive Health Care Privacy

[04/14/23]

The End Is Near – Stark Law Blanket Waivers Set to Terminate May 11

[02/20/23]

OCR’s Right of Access Initiative Continues in the New Year

[01/06/23]

Proposed Changes to the Confidentiality of Substance Use Disorder Patient Records Regulations

[12/30/22]

OCR Settles Another HIPAA Right of Access Investigation Regarding Personal Representative

[12/22/22]

OCR Issues Bulletin Regarding the Use of Web Tracking Technologies

[12/21/22]

OCR’s Right of Access Initiative: Three Additional Enforcement Actions Target Dental Practices

[10/12/22]

Provider Penalized for Failure to Properly Dispose of Patient Information

[08/29/22]

Scrutiny Increases into the Use of Website Tracking Tools in Health Care

[08/19/22]

Takeaways from OCR’s Right of Access Initiative: Additional Enforcement Actions Demonstrate Ongoing Risks of Noncompliance

[08/12/22]

Unauthorized Access to ePHI on Web Server Leads to $875,000 Settlement

[08/08/22]

HHS Releases Guidance on HIPAA and Information Related to Reproductive Health Care

[07/11/22]

HHS Releases Guidance on Remote Communication Technologies

[07/11/22]

Failure to Timely Provide Records Continues to Pose Significant Risk as Right of Access Initiative Continues

[05/03/22]

Impermissible Disclosures of PHI Leads to Settlement for Dental Practice

[04/28/22]

Dentist Disclosing PHI in Response to Negative Online Review Leads to $50,000 Civil Monetary Penalty

[04/28/22]

Notice of Enforcement Discretion Issued for Scheduling Technology for COVID-19 Vaccination Appointments

[01/22/21]

OCR Issues Guidance on Health Information Exchanges to Disclose PHI for Public Health Authority Activities

[12/30/20]

Potential Vendor Breach

[07/17/20]

HIPAA Compliance During the COVID-19 Pandemic

[03/18/20]

HIPAA Compliance Deficiencies and Failure to Comply with OCR’s Technical Assistance Leads to $100,000 Settlement

[03/12/20]

Failure to Encrypt Laptop and Failure to Comply with Technical Assistance from OCR Leads to $65,000 Settlement

[01/07/20]

Second $85,000 Penalty Issued Under OCR’s Right of Access Initiative

[12/13/19]

Failure to Properly Assess Breach Risk Results in $2.175 Million Fine to Affiliated Covered Entity

[12/03/19]

Publicly Available ePHI Leads to $1.6 Million Fine

[11/08/19]

Failure to Encrypt Hardware Results in $3 Million Fine

[11/07/19]

Deficient Risk Analyses, Stolen Records and Disclosure of NFL Player’s PHI Leads to $2.15 Million Penalty

[10/25/19]

Violations of Patient Privacy on Social Media Will Result in HIPAA Fines

[10/04/19]

BEWARE: Charging Improper Fees for Patient Access to Records Can Cost Providers Big

[09/13/19]

Failure to Provide Timely Access to Records Results in $85,000 Fine

[09/10/19]

Substance Use Disorder Providers Should Note SAMHSA Proposed Changes to 42 CFR Part 2

[08/30/19]

AMCA Breach of PHI and PII

[06/07/19]

Ten Types of Enforcement Actions OCR May Take Directly Against Business Associates

[06/04/19]

Consider Website and Other Technology Accessibility Obligations to Better Serve Your Community and Avoid Litigation and Loss of Federal Funding

[03/01/19]

Repeated Breaches of ePHI Result in a $3 Million Fine, Capping Off OCR’s “Record Year” of 2018 Enforcement Actions

[02/19/19]

Brrr! New Consumer Credit Freeze Rights Trigger Updates to Employers’ FCRA Disclosure Forms

[01/04/19]

OCR Announces Fine for Lack of BAA and Failure to Terminate Former Employee’s Access to PHI

[12/14/18]

Important Alert: Response to Emailed Bomb Threats

[12/13/18]

Business Associate’s Data Breach Leads to $500,000 Fine for Hospitalist Group

[12/10/18]

Disclosing PHI to a Reporter Leads to $125,000 HIPAA Settlement

[11/29/18]

Department of Homeland Security and FDA Collaborate to Address Medical Device Cybersecurity

[11/02/18]

Largest Health Data Breach = Largest OCR Settlement in History

[10/19/18]

Hospitals Fined for Allowing Documentary Film Crews to Film Patients Without Consent

[09/24/18]

Hurricane Florence: HHS Responds to a Public Health Emergency by Issuing HIPAA Privacy Rule Waiver and Equal Access Guidance

[09/19/18]

SAMHSA Releases Additional Changes to 42 CFR “Part 2” Substance Use Disorder Confidentiality Regulations

[01/26/18]

CMS Clarifies that Texting PHI Through Secure Platforms Is Permissible – But Not Orders!

[12/29/17]

CMS Prohibition on Texting? Evaluating Next Steps for Your Organization

[12/28/17]

CMS Appears to Forbid All Forms of Text Messaging

[12/19/17]

OCR HIPAA Guidance for Opioid National Emergency

[11/13/17]

Final FDA Guidance on Interoperable Medical Devices

[09/20/17]

Proposed Incentives for Behavioral Health Providers to Adopt Electronic Health Records

[08/24/17]

OCR Continues Heightened Pace of HIPAA Enforcement Actions

[05/08/17]

For the Record: Patients’ Attorneys Exempt from Medical Record Certification and Retrieval Fees in Wisconsin

[05/08/17]

Don’t Forget! HIPAA Breaches Affecting Fewer Than 500 Must Be Reported to OCR by March 1, 2017

[02/21/17]

First Three HIPAA Enforcement Actions of 2017

[02/13/17]

FDA Releases Final Post-Market Guidance on Medical Device Cybersecurity

[01/11/17]

OCR Settlement Announced for Hybrid Entity HIPAA Breach

[12/05/16]

OCR Announces Largest Single-Entity Settlement to Date

[08/18/16]

Did You Get an OCR HIPAA Audit Letter or a Golden Pass?

[07/19/16]

OCR Phase 2 Audits Are Underway!

[03/23/16]

Patients’ Access Rights and Permissible Fees Under HIPAA

[03/22/16]

Double Trouble: Lack of Safeguards with Internet Document Sharing Application and Mobile Devices Results in $218,400 HIPAA Settlement for Hospital

[07/20/15]

HHS Settles with Colorado Pharmacy over Disposal of Patient Records

[04/29/15]

The Importance to HIPAA Compliance of IT System Monitoring and Support: HHS Announces $150,000 HIPAA Enforcement Action

[12/10/14]

HHS Announces Largest HIPAA Settlement to Date

[05/09/14]

HHS Announces HIPAA Settlements for Stolen Laptops

[04/25/14]

HHS Announces HIPAA Settlement with County Department of Health

[03/14/14]

OCR Issues Spanish Version of Model Notice of Privacy Practices

[02/25/14]

The Deadline for Annual HIPAA Breach Notification Reports Is Fast Approaching

[02/17/14]

Patients to Have Direct Access to Laboratory Test Results

[02/12/14]

Physician Practice Agrees to $150,000 HIPAA Settlement

[12/30/13]

HHS Announces $1.2 Million HIPAA Settlement in Photocopier Breach Case

[08/15/13]

HHS Announces $1.7 Million HIPAA Settlement

[07/12/13]

HHS Announces $275,000 HIPAA Enforcement Action

[06/18/13]

HHS Announces $400,000 HIPAA Enforcement Action

[05/22/13]

HITECH Final Rule – Impact on Notice of Privacy Practices

[03/01/13]

The HIPAA Final Omnibus Rule’s Impact on an Individual’s Rights to Access Electronically Maintained PHI

[02/19/13]

The HIPAA Final Omnibus Rule’s Impact on an Individual’s Rights to Request Restrictions When Paying Out-of-Pocket

[02/14/13]

HITECH Final Rule – Implementation of GINA

[02/12/13]

HITECH Final Rule – Impact on Enforcement Rule

[02/07/13]

HITECH Final Rule – Impact on Breach Notification Rule

[02/04/13]

HITECH Final Rule – Impact on Business Associates (Part 2 of 2)

[01/31/13]

HITECH Final Rule – Impact on Business Associates (Part 1 of 2)

[01/28/13]

HHS Issues HITECH Final Rule

[01/18/13]

OCR Issues Guidance Regarding HIPAA De-Identification Methods

[01/08/13]

HHS Announces First Settlement of HIPAA Breach Affecting Less Than 500 Individuals

[01/03/13]

HHS Announces HIPAA Settlement with Massachusetts Providers for $1.5 Million

[09/19/12]

HHS Settles HIPAA Security Case with State Agency for $1.7 Million

[06/27/12]

OMB Extends Review of Final HITECH Regulations

[06/22/12]

OCR Provides Update on HIPAA Security and Privacy Audit Program

[06/13/12]

Massachusetts Hospital to Pay $750,000 to Settle Data Breach Lawsuit

[06/01/12]

HHS Announces HIPAA Settlement with Physician Practice

[04/25/12]

New HITECH Regulations on the Horizon

[03/29/12]

HHS Announces $1.5 Million HIPAA Enforcement Action

[03/21/12]

HIPAA Breach Notification Reports Due to OCR by February 29, 2012 for Calendar Year 2011 Small Breaches

[02/28/12]

HHS Announces HIPAA Audit Program

[12/02/11]

Hall Render Launches Comprehensive HIPAA Microsite

[11/17/11]