Policy and Regulation

Amid COVID-19 Telehealth Use, Sen. Probes Zoom on Privacy Practices

by Jessica Davis

Sen. Richard Blumenthal, D-Connecticut, sent a letter to Zoom CEO Eric Yuan, asking for insights into the video conferencing platform’s privacy and security practices, given the drastic increase...

Coronavirus Relief Package Needs Privacy Focus, Groups Tell Congress

by Jessica Davis

Thirteen civil-society groups are urging Congress to keep patient privacy protections center stage in any drafted Coronavirus relief packages, and any waivers of these protections must exclusively...

OCR Clarifies HIPAA Liability on Telehealth Use During COVID-19

by Jessica Davis

The Department of Health and Human Services’ Office for Civil Rights released a list of frequently asked questions to common concerns raised about its recent move to lift certain HIPAA penalties...

Sens. Flag Privacy, Security Concerns Over Google COVID-19 Screening Site

by Jessica Davis

A group of Democratic Senators are raising concerns about the potential Google COVID-19 screening website over possible privacy and cybersecurity risks, after the Trump Administration announced Google...

Senate GOP Bill Proposes Federal Privacy Standard Bill, Preempts States

by Jessica Davis

Sen. Jerry Moran, R-Kansas, released his spin on federal privacy legislation on March 12 that would establish a national privacy standard and preempt state privacy laws, after bipartisan talks came to...

Sens. Reintroduce Privacy Law for Substance Use Disorder Treatment

by Jessica Davis

Sens. Joe Manchin, D-West Virginia, and Shelley Moore Capito, R-West Virginia, reintroduced the Protecting Jessica Grubbs Legacy Act, a privacy bill designed to modernize 42 CFR Part 2 regulations to...

Judge Finalizes Quest Diagnostics Settlement Over 2016 Data Breach

by Jessica Davis

The US District Court in New Jersey issued a final approval of a class-action lawsuit settlement between Quest Diagnostics and the patients impacted by a 2016 data breach. The testing giant will pay...

UW Medicine Hit with Lawsuit for Breach Impacting 974K Patients

by Jessica Davis

The University of Washington Medicine is facing a class-action lawsuit following its disclosure of a patient data breach that impacted 974,00 patients. According to the lawsuit filed in the King...

Senate Bill Would Create Federal Data Protection Agency

by Jessica Davis

Sen. Kristen Gillibrand, D-New York, recently unveiled her take on privacy legislation, which would establish a federal data protection agency (DPA) to give consumers more control over their...

eHI, CDT Partner on Consumer Privacy Framework for Health Data

by Jessica Davis

eHealth Initiative and the Center for Democracy and Technology (CDT) are partnering on the development of a consumer privacy framework for health data not currently protected by HIPAA. The Building a...

Privacy Leaders: Congress, Not ONC, Holds Onus for Health App Privacy

by Jessica Davis

Industry stakeholders are urging the Office of the National Coordinator to release its proposed interoperability and information blocking rules without delay, in response to a recent push from EHR...

AHIP: CMS Price Transparency Proposal Poses Patient Privacy Risk

by Jessica Davis

In November, the Trump Administration rolled out broad transparency rules designed to provide consumers with more insights into how much hospitals charge health insurers for both out-of- and in-network...

Judge Rules Against HHS Over HIPAA Right of Access Third-Party Fees

by Jessica Davis

Washington, DC US District Court Judge Amit Mehta issued a blow to the Department of Health and Human Services for its 2013 HIPAA Right of Access rule around third-party requests for patient records,...

CCFH Urges Lawmakers, OCR to Uphold Patient Privacy Protections

by Jessica Davis

Citizens Council for Health Freedom is calling on state legislators to defend the Minnesota Health Records Act (MHRA) following reports of some major healthcare partnerships with large tech companies,...

Sen. Warner Digs into DHA Over Exposed Army Medical Center Images

by Jessica Davis

Sen. Mark Warner, D-Virginia is scrutinizing the Defense Health Agency’s cybersecurity practices, as the sensitive medical data of servicemembers continues to be exposed online due to unsecured...

HSCC Tells HHS: Include Patching in Stark Law Cybersecurity Donations

by Jessica Davis

The Department of Health and Human Services’ proposed changes to the Physician Self-Referral Law (Stark Law) and the Federal Anti-Kickback Statute should include patching and update language in...

DCH Health Faces Federal Lawsuit After 10-Day Ransomware Attack

by Jessica Davis

Alabama-based DCH Health System is facing a federal lawsuit following a ransomware attack that disrupted care for non-critical patients for about 10 days in October, first reported by local news outlet...

Proposed Bill Would Close HIPAA Gaps, Curb Health App Privacy Risks

by Jessica Davis

Sens. Amy Klobuchar, D-Minnesota, and Lisa Murkowski, R-Alaska, unveiled legislation on June 14, focused on closing privacy gaps in HIPAA, which does not currently cover tech like health apps,...

Woman Charges WV Firm With Violating Her Patient Privacy Rights

by Fred Donovan

Elizabeth Fry, a resident of Logan County, West Virginia, has filed a state lawsuit in Kanasha Circuit Court charging that Charleston-based Molina Information Systems violated her patient privacy...

Oklahoma Hospital Sued for Alleged HIPAA Violation Over Drowning

by Fred Donovan

McAlester Regional Health Center (MRHC) in Oklahoma is being sued for an alleged HIPAA violation for sharing information on a boy’s drowning with his biological mother, reported the Pauls Valley...