Statute
HITECH Act
331 published works
Data Counsel
OCR releases YouTube Video Addressing “Recognized Security Practices” in HIPAA Enforcement Context
By Kimberly Gordy, Adam Cohen, Craig Robinson
As a Halloween treat for HIPAA-covered entities and business associates, on October 31, the Department of Health and Human Services Office for Civil Rights (OCR) released a new video on its…
Health Law Rx
Must Watch Summer Viewing Coming Soon: OCR’s Upcoming Video Presentation on the HITECH Act’s Recognized Security Practices
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced June 10, 2022 that it is producing a video presentation on "recognized security practices" as…
Health Law Rx
Help Wanted: OCR Seeks Public Input on “Recognized Security Practices” and Sharing Settlements with Harmed Individuals Under the HITECH Act
Covered entities and business associates subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") have the chance to provide input on two amendments to the Health Information…
Inside Privacy
OCR Seeks Comments Related to Recognized Security Practices and Distribution of Civil Monetary Penalties under the HITECH Act
By Libbie Canter, Anna D. Kraus, Elizabeth Brim
In a new post on the Covington Digital Health blog, our colleagues discuss the Office for Civil Rights' ("OCR") recently published request for information ("RFI") seeking comment on implementing certain…
Regulatory Oversight
HHS/OCR Seeks Comment on Scope and Implementation of “Recognized Security Practices”
By John West, Bonnie Gill
On April 6, the U.S. Department of Health and Human Services, Office of Civil Rights (HHS) called for public comment on an existing statutory provision that provides a safe harbor…
Privacy and Cybersecurity
HIPAA Enforcers Seek Public Input on Recognized Security Practices and Sharing Enforcement Recoveries with Affected Individuals
By Elizabeth A. Kastner, Alaap B. Shah
The past several years have proven difficult for healthcare entities due to increasing cybersecurity threats, breaches and regulatory enforcement. Following these trends, on April 6, 2022, the Department of Health…
Privacy and Cybersecurity
HHS OCR Issues Annual HIPAA Reports to Congress
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently submitted two reports to Congress setting forth the HIPAA breaches and complaints reported to OCR during…
Covington Digital Health
FTC Releases New Health Breach Notification Rule Guidance, Targets Health Apps and Connected Devices
By Libbie Canter, Anna D. Kraus, Elizabeth Brim
On January 21, the Federal Trade Commission (“FTC”) announced new resources to help companies determine their obligations under the Health Breach Notification Rule (the “Rule”): the Health Breach Notification Rule:…
Rivkin Rounds
HIPAA Changes Coming in 2022 Might Require Policy Revisions
An article in the December issue of HIPAA Regulatory Alert, "HIPAA Changes Coming in 2022 Might Require Policy Revisions,” discussed how proposed changes to HIPAA and the HITECH Act may…
Inside Privacy
FTC Adopts Policy Statement on Privacy Breaches by Health Apps and Connected Devices
By Libbie Canter, Anna D. Kraus, Tara Carrier
On September 15, the Federal Trade Commission (“FTC”) adopted, on a 3-2 party-line vote, a policy statement that takes a broad view of which health apps and connected devices are…