Topic
Incident Response
217 published works
Life Sciences Legal Update
Physician Practice Caught in OCR Crossfire Following Theft of Unencrypted Flash Drive
By Lisa Baird
The theft of an unencrypted flash drive has led to an agreement by Adult & Pediatric Dermatology, P.C., of Concord, Mass., to pay $150,000 to the Department of Health and…
Inside Privacy
HHS Announces First HIPAA Settlement Based on Lack of Breach Notification Policies and Procedures
By Anna Kraus On December 27, 2013, the Office for Civil Rights (OCR) within the Department of Health and Human Services (HHS) announced a HIPAA settlement with Adult & Pediatric…
Privacy & Information Security Law Blog
UK ICO Publishes New Breach Notification Guidance for Telecom Operators and ISPs
On September 26, 2013, the UK Information Commissioner’s Office (“ICO”) published new breach notification guidance (the “Guidance”), applicable to telecom operators, Internet service providers (“ISPs”) and other public electronic communications…
Workplace Privacy, Data Management & Security Report
CMS Seeks Emergency Review and Approval of its One-Hour Breach Notification Rule for Exchanges
Today, the Centers for Medicare and Medicaid Services (CMS) requested an "emergency review" of its recently proposed rule that "[Federally-facilitated Exchanges or FFEs], non-Exchange entities associated with FFEs, and State Exchanges…
Healthcare Law Insights
HIPAA Update: Omnibus Rule Changes to Breach Notification and Business Associates
By Steve James
On January 17, 2013, the Office for Civil Rights of the U.S. Department of Health & Human Services issued its final rule modifying the HIPAA privacy, security, enforcement, and breach…
Privacy & Information Security Law Blog
North Dakota Amends Breach Notification Law to Cover Health Information
On April 19, 2013, the North Dakota legislature amended the state’s breach notification law (Section 51-30-01 of the North Dakota Century Code) to expand the definition of “personal information” to…
InsureReinsure
REMINDER – HIPAA Complimentary Seminar – June 26, 2013
By David Szabo, Troutman Pepper Locke
The HIPAA Final Rule: Impact on Privacy, Security, Breach Notification, and EnforcementJune 26, 2013Edwards Wildman Palmer LLP750 Lexington AvenueNew York, New York 10022
HIPAA & Health Information Technology
Do I really need to report (or get a report on) every “Security Incident” under the sun to comply with HIPAA?
Under HIPAA, where do we draw the line between a run-of-the-mill, ordinary garden variety "security incident" and a "presumed breach" when it comes to reporting PHI events? How do we…
Data Counsel
What Covered Entities and Business Associates Need to Do to Prepare for the New HIPAA/HITECH Requirements (Part I)
The Department of Health and Human Services (HHS) issued, on January 17, 2013, its Final Omnibus Rule modifying the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and…
Data Counsel
The HIPAA/HITECH Final Rule Has Been Released
The long awaited HIPAA/HITECH Final Rule is out. The final rule is effective March 26, 2013, but covered entities (CEs) and business associates (BAs) will have 180 days beyond the effective date…