Statute
HIPAA Security Rule
84 published works
Data Matters
Risk Analysis in the Crosshairs: Four Recent Ransomware Resolutions Preview the HIPAA Security Rule Amendments
By Michael C. Hochman, Sasha Hondagneu-Messner, Brad A. Carney
On April 23, 2026, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced resolution agreements and corrective action plans with four regulated entities following…
Privacy and Cybersecurity
The Technology Contracting Dilemma
Some technology articles age well. Here’s one on the HIPAA Security Rule: https://www.stoelprivacyblog.com/2025/01/articles/hipaa/a-deeper-dive-into-the-proposed-modifications-to-the-hipaa-security-rule/. The proposed modifications to the HIPAA Security Rule, published in the Federal Register on January 6, 2025,…
Healthcare Law Insights
Major HIPAA Security Rule Changes on the Horizon: Is Your Healthcare Organization Ready?
By Former Attorney Taylor White, Lisa Luetkemeyer
This post is part of our The Top 2025 Privacy and Security Issues Still Shaping Healthcare series, in which our team of attorneys provides essential strategies and insights for healthcare…
Healthcare Law Insights
When the Rules Changed: The Top 2025 Privacy and Security Issues Still Shaping Healthcare
The 2025 Top Ten list reflects a regulatory environment in significant transition. Last year’s healthcare privacy and security landscape presented extraordinary challenges for compliance professionals, marked by sweeping regulatory changes on the federal and state level, intensified…
Ogletree Deakins Insights
2025 Enforcement Trends: Risk Analysis Failures at the Center of HHS’s Multimillion-Dollar HIPAA Penalties
By By: Benjamin W. Perry, Lauren N. Watson
Quick Hits The HIPAA Security Rule requires HIPAA-covered entities and business associates to complete a comprehensive risk analysis, aimed at identifying potential risks and vulnerabilities to the electronic Protected Health…
Health Law Diagnosis
Breaches Within Breaches: Contractual Obligations After a Security Incident
This post was authored by Roma Patel, Associate in Robinson+Cole's Data Privacy + Cybersecurity Team. We often cover consumer class action complaints against companies regarding the privacy and security of…
Data Privacy + Cybersecurity Insider
Breaches Within Breaches: Contractual Obligations After a Security Incident
By Roma Patel
We often cover consumer class action complaints against companies regarding the privacy and security of personal information. However, litigation can also arise from alleged breach of contract between two companies.…
Data Privacy + Cybersecurity Insider
Northeast Radiology Settles with OCR
The Office for Civil Rights (OCR) announced on April 10, 2025, that it has settled alleged HIPAA Security Rule violations with Northeast Radiology for $350,000. The investigation followed a breach…
Health Law Blog
‘Security! Security!’ HHS Proposes Updates To HIPAA’s Security Rule
By Erica Erman
Previously published in Healthcare News and Healthcare Michigan Can you remember healthcare security 20+ years ago? It seems like a different world from now. Believe it or not, the HIPAA Security Rule has…
Triage Health Law
HHS Publishes Notice of Proposed Rulemaking to Amend HIPAA Security Rule Requirements—Comments Due March 7, 2025
By Gicel Tomimbang, John Wyand, Julia Jacobson
Summary On December 27, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) published its Notice of Proposed Rulemaking (“NPRM”) titled HIPAA Security Rule to…