Statute
HITECH Act
331 published works
Data Counsel
DSIR Deeper Dive: Regulatory Investigation Landscape
By Lynn Sessions, Patrick H. Haggerty, Kimberly Gordy
HIPAA-covered entity and business associate breaches continue to draw attention from the Office for Civil Rights (OCR) and other regulators. In almost every HIPAA incident we handled in 2019 involving…
Global Policy Watch
Compliance Considerations for Companies and Individuals Donating Funds, Goods, or Services to Domestic Government Entities
As the coronavirus pandemic continues across the country, many corporations, organizations, and individuals are looking for ways they can help fight back. This often includes donating money, goods, or services…
Health Care Reform Dashboard
HIPAA Security Rule Update Related to COVID-19
By Mary J. Mullany, Eric K. Temmel
Telehealth Remote Communication Technology On March 17, 2020, the federal Department of Health and Human Services (HHS) announced that the Office for Civil Rights (OCR) will suspend enforcement activities and waive penalties…
Healthcare Law Blog
2019 Year in Review: Notable Changes in Law, Policy, and Enforcement of HIPAA
According to a December 20, 2019 Report by HIPAA Journal, nearly 39 million health care data breaches had been reported to the U.S. Department of Health and Human Services (“DHHS”),…
Password Protected
HHS Lowers Annual Caps on Most HIPAA CMPs
On April 30, 2019, the United States Department of Health and Human Services (HHS) published a notice of enforcement discretion that lowers most of the annual caps on civil money…
Data Security & Privacy
OCR Guidance May Signal Increase in Enforcement Activity Against Business Associates
In 2009, the Health Information Technology for Economic and Clinical Health (HITECH) Act, imposed direct liability on business associates for certain violations of the HIPAA Privacy, Security, Breach Notification, and…
Global Investigations & Compliance Review
DOJ Pursues More Electronic Health Records Cases
By Colin Jennings, Ayako Russell
On May 31, 2019, the U.S. Attorney for the District of Kansas announced a $250,000 settlement with Coffey Health System, after two whistleblowers filed qui tam suit against Coffey for…
Health Care Today
When the government may go after business associates under HIPAA
The Office of Civil Rights (OCR) within the Department of Health and Human Services (HHS) has been able to hold “business associates” directly liable for certain HIPAA violations since 2009,…
Data Privacy + Cybersecurity Insider
OCR Issues Fact Sheet Listing Circumstances in which Business Associates May Face Direct Liability for HIPAA Violations
By Conor Duffy
In a development that may – understandably – have been overlooked by many heading into Memorial Day weekend, on May 24, 2019, the U.S. Department of Health and Human Services…
Life Sciences Legal Update
OCR Clarifies Direct Liability of Business Associates Under HIPAA
By Kimberly Gold, Vicki Tankle
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) released a new fact sheet outlining and clarifying violations of HIPAA (Health Insurance Portability and Accountability Act…