On January 3, 2025, a significant lawsuit (Morris v. Rhode Island Quality Institute) was filed against a state health information exchange (HIE). The case was brought by a former employee and whistleblower who alleges that Rhode Island’s HIE,
Latest from Oscislawski LLC - Page 3
HIPAA’s Cybersecurity Glow-Up: What’s Changing and Who’s Affected
On January 6, 2025, the Office for Civil Rights (OCR) at the Department of Health and Human Services (HHS) decided it was time to give the HIPAA Security Rule a much-needed cybersecurity makeover—and let’s just say, it’s not just a
TEFCA Anticipated to Grow in 2025
The Trusted Exchange Framework and Common Agreement™ (TEFCA) was created to connect Health Information Networks (HIN) that operate disparately across the United States to support the nationwide sharing of health data. TEFCA seeks to streamline the digital flow of health
A Look Back at 2024: HIPAA Enforcement Year in Review
Calendar year 2024 brought a range of high-impact HIPAA enforcement actions from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). By the year’s end, OCR had collected over $9 million through various settlements and
Health Data, Technology, and Interoperability Rules, HTI-1, 2, & 3
The landscape of health IT regulation just took another major leap forward. In the final days of 2024, federal regulators dropped two game-changing rules—HIT-2 and HTI-3—adding to the foundation set by HTI-1. Together, these regulations are reshaping how healthcare organizations
OCR Sees Uptick in Ransomware Incidents
OCR recently concluded three investigations, which resulted in settlement payments relating to ransomware incidents. The agency noted that there has been a 264% uptick in large ransomware breaches since 2018.The first settlement was reached with Cascade Skin and Eye Centers
Texas Sues to Block new HIPAA Reproductive Health Care Rule
In June 2024, HHS promulgated a final rule which amended the HIPAA Privacy Rule to strengthen privacy protections for information in health records related to reproductive health care. The new rule is facing its first legal challenge from the Texas
Lessons Learned from Real Time vs. PointClickCare: Mind your Information Blocking Ps and Qs
A federal district judge has granted preliminary injunctive relief to Real Time Medical Systems, Inc. (“Real Time”) barring the defendant, PointClickCare (“PCC”), from deploying unsolvable CAPTCHAs that interfered with Real Time’s ability to access the data of its skilled nursing
HIPAA Reproductive Health Care Privacy – Attestation Template, Policy Samples, updated HIPAA policies, a HIPAA-New Jersey Reproductive Health Care Law crosswalk, and more!
June 25, 2024 has arrived! This means that the Final Rule for HIPAA Privacy to Support Reproductive Health Care Privacy is officially in effect, and HIPAA covered entities and business associates may now begin implementing its new requirements! The deadline
Who’s On First? Confusion Continues About Who Should be Reporting the Change Healthcare PHI Breaches
On May 31, 2024, the Office of Civil Rights (OCR) released “updates” to its HIPAA FAQs regarding the Change Healthcare cybersecurity incident. In its Press Release, OCR pointed out that it updated its FAQs to specifically address questions it