Our Health Care and Privacy, Cyber & Data Strategy groups review the status of the proposed update to the HIPAA Security Rule. The proposed changes to the HIPAA ...

The National Institute of Standards and Technology is seeking public comment as it plans to update its 2008 guidance for implementing the HIPAA Security Rule, which went into effect about 20 years ago ...

I lead PR and communications at Municorn, where brand trust meets data protection. If customers doubt their health information is safe, there’s no brand to build. I’ve seen how breaches erode trust ...

Some healthcare providers already meet potential new HIPAA security requirements, but others may face significant challenges.

Doctors in a meeting (Getty Images) The Department of Health and Human Services is responding to a growing threat of cyberattacks against the healthcare industry. Healthcare was the most breached ...

March 14, 2025 - On Jan. 6, 2025, the U.S. Department of Health and Human Services (HHS) proposed new regulations to enhance cybersecurity protections for electronic protected health information (ePHI ...

Editor’s note: Steven W. Teppler is a partner and chair of the Cybersecurity and Data Privacy practice group at Mandelbaum Barrett PC in Roseland, New Jersey. Carly ...

On March 21, 2025, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement of HIPAA security rule claims involving Health Fitness Corporation (Health ...

Opposition is building as industry organizations weigh in on the public comment period for proposed changes to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. In January ...

The Office for Civil Rights in the U.S. Department of Health and Human Services this week announced that it has reached a settlement with Tampa, Florida-based BayCare Health System over several ...

Since Feb. 21, 2024, the U.S. Department of Health and Human Services (HHS) Office of Civil Rights (OCR) has announced 14 monetary penalties/settlements related to cyber incidents with no signs of ...