Last week, the HHS Office of Civil Rights (OCR) announced a settlement that has far-reaching implications on the importance of complying with the HIPAA Security Rule where medical devices create and maintain electronic protected health information (ePHI). See Data Law Insights for a post authored by Jodi Daniel, Elliot Golding, and Stephanie Willis for more details about this settlement and another one against an insurance holding company announced less than a week later.
