Topic
Data Breach
3,441 published works
Password Protected
OCR Continues Holding Healthcare Entities Accountable for Protected Health Information Breaches
On Feb. 6, 2024, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced a $4.75 million settlement with New York non-profit health system Montefiore…
Hunton Insurance Recovery Blog
Data Breach Putative Class Action Questions Whether Broker Was Swift Enough in Notice and Response
By Andrea DeField, Matthew J. Revis
While America was tuned into the big game, one California insurance broker faced its own treacherous showdown in the form of a putative class action filed on February 8, 2024…
Inside Privacy
HHS Settles Malicious Insider Cybersecurity Investigation for $4.75 Million
On February 6, the U.S. Department of Health and Human Services (“HHS”), Office of Civil Rights (“OCR”), announced that it had settled a cybersecurity investigation with Montefiore Medical Center (“Montefiore”),…
Password Protected
Can Any Data Breach Investigation Report Deserve Protection? Part II
By Tom Spahn
Last week’s Privilege Point described a data breach victim’s latest losing effort to claim privilege protection for its consultant’s investigation report. Leonard v. McMenamins Inc., Case No. C22-0094-KKE, 2023 U.S. Dist. LEXIS 217502…
Privacy & Information Security Law Blog
FTC Proposes Settlement with Blackbaud in Connection with Alleged Security Failures
On February 1, 2024, the Federal Trade Commission announced a proposed settlement with Blackbaud Inc. in connection with alleged security failures that resulted in a breach of the company’s network…
Blaneys Appeals
COURT OF APPEAL SUMMARIES (January 29 – February 5)
Jump To: Table of Contents | Civil Decisions | Short Civil Decisions Good evening. Following are our summaries of the civil decisions of the Court of Appeal for Ontario for…
Password Protected
Can Any Data Breach Investigation Report Deserve Protection? Part I
By Tom Spahn
Companies and even law firms suffer data breaches, and usually claim privilege and work product protection for the inevitable resulting investigation. Unfortunately, courts seem to have rejected such protection claims…
Workplace Privacy, Data Management & Security Report
Downstream Breaches Cause Headaches for Healthcare Providers, as State AG Seeks Law Change to Require AG Notification
For healthcare providers and health systems covered by the privacy and security regulations under the Health Insurance Portability and Accountability Act (HIPAA), a breach of unsecured protected health information (PHI)…
eDiscovery Today Blog
Record Number of Compromises by 72 Percent, Reports ITRC: Cybersecurity Trends
By Doug Austin
The ITRC has released its 2023 Annual Data Breach Report, which shows a record number of compromises, 72 percent over the previous high! The post Record Number of Compromises by…
Online and On Point
Florida Bill Proposes Safe Harbor Against Breach Suits to Businesses Maintaining Recognized Cybersecurity Programs
By Alexis M. Buese, Eric Setterlund
A recently introduced bill in the Florida Legislature would provide businesses operating in Florida, including health care providers, with a legal defense to data breach lawsuits if they maintain robust…