The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) must take significant steps to enhance its HIPAA audit program to ensure stronger protection of electronic ...

Melanie Fontes Rainer, HHS OCR director, speaking at a HIPAA summit this week (Image: Marianne Kolbasuk McGee) As the final months of the Biden administration wrap up, regulators at the agency charged ...

Purdue University is a Hybrid Entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Purdue’s primary purpose is education; however, Purdue does have departments and ...

Healthcare organizations face an unprecedented security crisis. Since 2018, the number of individuals affected by healthcare data breaches has nearly doubled—hitting 56 million last year. These ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

The Department of Health and Human Services submitted proposed updates to the 20-year-old HIPAA Security Rule to the White House for review, aiming to enhance the cybersecurity protections for ...

An unmitigated revamp of healthcare cybersecurity is coming in 2025, and experts warn that the compliance burden for organizations will be steep. Since 2005, healthcare organizations have been subject ...

HIPAA is often used as a shorthand for "no," but the law is a nuanced permissions framework, not a blanket prohibition. Explore why "HIPAA-compliant" software often enforces a caricature of the actual ...

Understanding best practices for mobile device security in today’s healthcare environment can be challenge for many organizations. As mobile devices such as tablets and smartphones become more ...

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced a Notice of Proposed Rulemaking (NPRM) aimed at enhancing cybersecurity protections for electronic ...