Last week, the Federal Trade Commission (“FTC”) issued a policy statement that served to remind developers of apps, connected device manufacturers, and related entities of the applicability of the FTC’s Health Breach Notification Rule... Read More
This month, the Department of Health and Human Services, Office for Civil Rights (“OCR”), the agency tasked with enforcing the Health Insurance Portability and Accountability Act (“HIPAA”), issued its Summer 2021 Cybersecurity Newsletter.... Read More
The Whistleblower Exception protects a covered entity from being considered to have committed a breach if the whistleblower is a member of the covered entity’s workforce and is the victim of a crime. In a recent article in Relias Media called,... Read More
The Department of Health and Human Services Office for Civil Rights (“OCR”) continues to bring enforcement actions against entities it alleges have infringed on a patient’s right to timely access their records in violation of the Health... Read More
In October 2020, Frier Levitt described how the Cybersecurity and Infrastructure Security Agency (“CISA”) and the FBI announced an “increased and imminent cybercrime threat to U.S. hospitals and healthcare providers.” Since that time,... Read More
On January 21, 2021, the U.S. Department of Health and Human Services (“HHS”) published proposed rules that would significantly modify existing regulations concerning the Health Insurance Portability and Accountability Act (“HIPAA”). The... Read More
The Department of Health and Human Services Office for Civil Rights (“OCR”) continues to bring enforcement actions against entities it alleges have infringed on a patient’s right to timely access their records in violation of the Health... Read More
On January 15, 2021, the Department of Health and Human Services Office for Civil Rights (“OCR”) announced that Excellus Health Plan, Inc. has agreed to pay $5.1 million and to implement a corrective action plan to settle potential violations of... Read More
The Office for Civil Rights (“OCR”) announced today that the City of New Haven, Connecticut (“City”), which operates a public health clinic, has agreed to pay $202,400 and enter a corrective action plan to settle allegations of a potential... Read More
On Wednesday, October 28, the Cybersecurity and Infrastructure Security Agency (“CISA”) and the FBI announced an “increased and imminent cybercrime threat to U.S. hospitals and healthcare providers.” Preliminary news reports have identified... Read More
