HIPAA and Compliance News

OCR Releases Educational Video on HIPAA Security Rule

by

The HHS Office for Civil Rights (OCR) released an educational video to help covered entities understand how the HIPAA Security Rule can help them defend against cyberattacks. The video was produced in...

Inmediata Health Resolves Multi-State Data Breach Investigation With $1.4M Settlement

by

Puerto Rico-based healthcare clearinghouse Inmediata Health agreed to a $1.4 million settlement to resolve a multi-state data breach investigation backed by 33 state attorneys general. Inmediata...

AHA: OCR Tracking Technology Rule Violates HIPAA Regulations

by

The American Hospital Association (AHA) has urged Congress and the HHS Office for Civil Rights (OCR) to withdraw the rule related to online tracking technologies, arguing that it violates HIPAA...

ONC, OCR Release Security Risk Assessment Tool Version 3.4

by

The Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC) announced the release of version 3.4 of the Security Risk Assessment (SRA) Tool,...

Senator Seeks Stakeholder Feedback on Improving Health Data Privacy

by

Healthcare stakeholders have an opportunity to provide feedback to the Senate on improving health data privacy in the US, thanks to a request from US Senator Bill Cassidy (R-LA), a ranking member of...

OCR Reaches $1.3M Settlement With LA Care Over Potential HIPAA Violations

by

LA Care, a Los Angeles-based health plan, agreed to a $1.3 million settlement and corrective action plan (CAP) to resolve potential HIPAA violations uncovered during two HHS Office for Civil Rights...

HHS, FTC Publish Warning Letters Sent to Healthcare Entities Over Third-Party Tracking Tech

by

In a document that spans hundreds of pages, HHS and the Federal Trade Commission (FTC) published letters sent to 130 healthcare organizations regarding the security and privacy risks of third-party...

UnitedHealthcare Resolves HIPAA Right of Access Case With $80K Settlement

by

The HHS Office for Civil Rights (OCR) reached a settlement with UnitedHealthcare Insurance Company (UHIC) to resolve potential HIPAA right of access violations. UHIC, a health insurer that provides...

HHS, FTC Warn Hospitals and Telehealth Providers About Third-Party Tracking Tech

by

The HHS Office for Civil Rights (OCR) and the Federal Trade Commission (FTC) sent a joint letter to 130 hospitals and telehealth providers to emphasize the security and privacy risks of third-party...

Lawmakers Ask HHS to Expand Proposed HIPAA Rule, Require Warrant For PHI

by

Spearheaded by United States Senators Ron Wyden (D-OR) and Patty Murray (D-WA), and US Representative Sara Jacobs (D-CA), lawmakers sent a letter to HHS Secretary Xavier Beccera urging the...

Examining Health Data Privacy, HIPAA Compliance Risks of AI Chatbots

by

AI chatbots, such as Google’s Bard and OpenAI’s ChatGPT, have sparked continuous conversation and controversy since they became available to the public. In the healthcare arena, patients...

OCR Reinforces Importance of Multi-Factor Authentication in Healthcare

by

Strong authentication practices can help healthcare organizations mitigate breach risk and maintain compliance, the HHS Office for Civil Rights (OCR) reminded covered entities in its June 2023...

HHS Settles HIPAA Investigation With Healthcare Business Associate

by

The HHS Office for Civil Rights (OCR) settled a HIPAA investigation involving iHealth Solutions (also known as Advantum Health), a healthcare business associate that provides coding, billing, and IT...

24 Attorneys General Express Support For Bolstering Reproductive Care HIPAA Protections

by

The Biden Administration recently proposed amendments to HIPAA that aim to protect patients and providers from prosecution in relation to the provision of reproductive healthcare. In response to the...

Medical Record Snooping Case Leads to $240K HIPAA Settlement

by

The HHS Office for Civil Rights (OCR) reached a HIPAA settlement with Yakima Valley Memorial Hospital to resolve a medical record snooping case involving 23 security guards. Yakima Valley Memorial...

HHS Reaches Settlement With NJ Provider Over Potential HIPAA Privacy Rule Violations

by

The HHS Office for Civil Rights (OCR) announced a settlement with Manasa Health Center, a psychiatry provider in New Jersey, over a potential HIPAA Privacy Rule violation. According to an April 2020...

AHA Urges OCR to Suspend or Amend Online Tracking Guidance

by

The American Hospital Association (AHA) urged the HHS Office for Civil Rights (OCR) to reconsider its December 2022 Online Tracking Guidance, suggesting that its definition of protected health...

FTC Issues Health Breach Notification Rule Enforcement Action Against Fertility App

by

The Federal Trade Commission (FTC) alleged that Easy Healthcare Corporation, the company that operates the Premom Ovulation Tracker app, violated the Health Breach Notification Rule by failing to...

OCR Settles HIPAA Investigation With Revenue Cycle Management Company

by

The HHS Office for Civil Rights (OCR) settled a HIPAA investigation with MedEvolve, an Arkansas-based business associate that provides revenue cycle management, practice management, and practice...

OCR Resolves HIPAA Right of Access Case With Pennsylvania Therapist

by

The HHS Office for Civil Rights (OCR) settled a potential HIPAA right of access violation with Pittsburgh, Pennsylvania-based licensed counselor David Mente, MA, LPC. The psychotherapy provider must...