Statute
HIPAA
2,650 published works
Traverse Legal Expert Articles
Channel Partner Agreements: How a Software Vendor Protects Itself When It Never Meets the Customer
You sell through resellers, managed service providers, and distributors. Your partner signs the customer, deploys the software, runs the console, and holds whatever data exists. You have no contract with…
Data Privacy + Cybersecurity Insider
Privacy Tip #503 – Read This Before You Upload Medical Information into an AI Tool
The current statistics on how many people upload their medical information into a generative AI tool are staggering. It is clear to me that people are unaware of the risks…
Internet, IT & e-Discovery
Patient wasn’t harmed so Judge dismisses a Web Tracker lawsuit!
By Peter Vogel
HealthCareInfoSecurity.com reported “A federal court has tossed a proposed class action lawsuit filed against CRH Healthcare that alleged the Georgia firm unlawfully disclosed patient information by using web tracking tools.” …
Legal IT Insider
Startup Corner: Lawdie, the AI back office for law firms
By Caroline Hill - Editor-in-Chief
Founded in 2025 by CEO Sanay Shajith and CTO Meeth Naik, Lawdie is aiming to become the AI-powered back office for law firms. The startup automates operational tasks ranging from…
Privacy + Cyber + AI
OCR Announces Notable HIPAA Enforcement Actions Against Self-Funded Group Health Plans Following Ransomware Breaches
By Brent Hoard, Emily D. Zimmer, Lydia Parker, Laura Ferguson, Emma Trivax
Key Points OCR reached two 2026 settlements — totaling $695,000 — with self-funded group health plans following ransomware breaches, marking a notable expansion of direct HIPAA enforcement against self-funded health…
Privacy + Cyber + AI
HIPAA Rulemaking Delays: Trends, Causes, and the Future of the Pending Security Rule Update
Key Points OCR’s proposed 2025 HIPAA Security Rule update has a projected finalization date of July 2027, moved from the original May 2026 target and classified as a “long-term action”…
Legal Health Information Exchange
Who “Stands in the Shoes” of the Patient with Info Blocking?
Different requesters have different rights. Personal representatives, caregivers, and patient-designated recipients do not necessarily qualify for the same access to records. State law helps define a representative’s authority. Who can…
Data Privacy + Cybersecurity Insider
Privacy Tip #501 – Fitness Trackers Lack Transparency, Privacy + Security Features
A recent Electronic Frontier Foundation (EFF) article reports that companies that make wearable trackers, whether for fitness or health, “are behind the times when it comes to basic privacy practices…
ERISA Litigation & Compliance
First-Ever HIPAA Enforcement Against Self-Funded Health Plans: What Employers Need to Know
By Agnes Mahung Kolbeck, Kim Wilcoxon
On April 23, 2026, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced settlements with four health entities following investigations into ransomware breaches that…
Red Clover Advisors Blog
Navigating Consumer Privacy Obligations as a HIPAA- or GLBA-Regulated Organization
By Jodi Daniels
If your organization operates under the Health Insurance Portability and Accountability Act (HIPAA) or the Gramm-Leach-Bliley Act (GLBA), privacy compliance is not new to you. Both laws have their own…