Topic
Data Breach
3,439 published works
Global Regulatory Enforcement Law Blog
Defense Contractors Are Now Subject to Notice Requirements for Hacked Systems
By Reed Smith
This post was written by Gunjan Talati and Timothy Nagle. The 2013 National Defense Authorization Act (“NDAA”) became the law of the land in early January. This NDAA contains a…
Data Counsel
Privacy Class Actions: Year-in-Review
During 2012, privacy class actions continued to trend toward two major categories: 1) actions that arose out of a data breach event and 2) actions brought to prosecute an alleged…
HIPAA & Health Information Technology
OCR Announces First “Under 500” Breach Settlement
The first breach settlement announcement of the new year breaks new ground - a $50,000 fine based on theft of a laptop containing 441 patients' unencrypted data. It's the first settlement of…
Privacy & Information Security Law Blog
HHS Settles First Enforcement Action Relating to a Breach Affecting Fewer than 500 Individuals
On January 2, 2013, the Department of Health and Human Services announced a resolution agreement and $50,000 settlement with Hospice of North Idaho following a June 2010 laptop theft that…
Data Counsel
OCR’s Breach Settlement the First Ever Involving Less than 500 Patients
By Cory J. Fox
OCR started 2013 with a bang by announcing that it had reached “the first settlement involving a breach of unprotected electronic protected health information (ePHI) affecting fewer than 500 individuals”…
Health IT Law Blog
Settlement of first small scale HIPAA breach announced by HHS
In a sign that HHS is serious about small data breaches, the Office of Civil Rights (OCR) and The Hospice of North Idaho reached a settlement agreementĀ to resolveĀ allegations of a…
Workplace Privacy, Data Management & Security Report
Small HIPAA Breach (Affecting Fewer Than 500) Leads to Substantial Penalties
HIPAA data breach affecting 441 patients leads to investigation resulting in $50K in penalties due to alleged lapses in security compliance.
Data Counsel
Reminder Annual OCR Breach Reporting is Due March 1, 2013
The breach notification interim final rule requires covered entities to submit to the Office for Civil Rights (OCR) notice of breaches of unsecured protected health information (PHI) (45 C.F.R. 164.408)…
Government Contracts Legal Forum
New Cyber Breach Amendment Raises Questions for Cleared Contractors
By Kate Growley, David Bodenheimer
As a part of the Senate’s recent passage of the 2013 National Defense Authorization Act, Senator Carl Levin (D-MI) has introduced an amendment that would direct the Department of Defense…
Privacy Compliance & Data Security
The SAIC Breach and a Look Across the Chasm Between Significant Risk and Actual Harm Resulting from a HIPAA Breach
SAIC's recent Motion to Dismiss the Consolidated Amended Complaint filed in federal court in Florida as a putative class action highlights the gaps between an incident (like a theft) involving…