Policy and Regulation

Judge Dismisses Heritage Valley Malware Lawsuit Against Nuance

by Jessica Davis

A federal judge for the US District Court of the Western District of Pennsylvania has filed a motion to dismiss the lawsuit against Nuance Communications, filed by Heritage Valley Health System...

House Votes to Lift HHS Funding Ban on National Patient Identifier

by Jessica Davis

In its Fiscal Year 2021 minibus package passed this week, the House of Representatives once again voted to remove a provision that effectively bans providing federal funds to the...

Proposed COVID-19 Relief Bills Include Privacy, Security Funding

by Jessica Davis

The Senate Committee on Appropriations unveiled COVID-19 relief legislation this week, which would allocate $53 million in funds to the Department of Homeland Security...

OCR Settles with Small Provider for $25K Over Multiple HIPAA Violations

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights has reached a settlement with North Carolina-based Metropolitan Community Health Services, DBA Agape Health Services, over...

SAMHSA Revises Privacy Rule 42 CFR Part 2 for Substance Use Patients

by Jessica Davis

The Department of Health and Human Services’ Substance Abuse and Mental Health Services (SAMHSA) announced the agency has revised the Confidentiality of...

RWJF, Manatt Share Consumer Health Data Privacy Framework

by Jessica Davis

The Robert Wood Johnson Foundation and Manatt Health recently released a consumer Health Data Privacy Framework designed to address some of the gaps in existing health data privacy...

Microsoft Sues, Now Controls COVID-19 Phishing Campaign Domains

by Jessica Davis

The US District Court for the Eastern District of Virginia recently unsealed court documents that reveal Microsoft's to put an end to a massive COVID-19-themed phishing campaign...

$185K Proposed Settlement Reached in Grays Harbor Data Breach Lawsuit

by Jessica Davis

Grays Harbor Community Hospital and Harbor Medical Group has reached a proposed $185,000 settlement with the 88,000 patients impacted by a June 2019 ransomware attack, which drove...

UnityPoint Health Reaches $2.8M Settlement Over 2018 Data Breach

by Jessica Davis

Iowa Health System, doing business as UnityPoint Health, has reached a proposed $2.8 million settlement with the millions of patients impacted by two phishing-related data breaches in 2017 and...

Judge Sends Episcopal Health Data Breach Lawsuit Back to State Court

by Jessica Davis

A federal judge of the U.S. District Court for the Eastern District of New York has sent a data breach lawsuit against Episcopal Health Services back to state level courts, saying it lacked the grounds...

Community Care Patients Sue Accounting Firm Over Data Breach

by Jessica Davis

A class-action lawsuit has been filed against accounting firm BST and Co. CPAs, over a ransomware attack that breached the data of 170,000 patients from Community Care Physicians in New York, first...

Aveanna Healthcare Faces Lawsuit Over Monthlong Data Breach

by Jessica Davis

Georgia-based Aveanna Healthcare is facing a class-action lawsuit filed by more than 100 patients impacted by a monthlong data breach from 2019. Over 166,000 patients were affected by the security...

Sens. Propose Bill to Regulate Privacy of COVID-19 Contact Tracing Apps

by Jessica Davis

Sens. Maria Cantwell, D-Washington, and Bill Cassidy, R-Louisiana, recently introduced privacy legislation designed to protect the data collected, used, and maintained by COVID-19 contact tracing apps...

Sens. Ask FBI, CISA How to Protect COVID-19 Medical Research Data

by Jessica Davis

The FBI and the Department of Homeland Security Cybersecurity and Infrastructure Agency are being asked how they’re defending against attempts to hack COVID-19-related research data, following...

Zoom Settles with NY AG Over COVID-19-Related Privacy, Security Issues

by Jessica Davis

Zoom settled with New York Attorney General Letitia James on May 7, following a state-led investigation into the videoconferencing platform. James launched an investigation after a number of privacy...

LabCorp Hit with Shareholder Lawsuit Over 2 Separate Data Breaches

by Jessica Davis

LabCorp shareholder Raymond Eugenio recently filed suit against the lab testing giant, as well as its 12 directors and executives, to recoup share value losses caused by two data breaches, first...

Judge Approves $8.9M Banner Health Settlement Over 2016 Data Breach

by Jessica Davis

A Federal judge of the US District Court of Arizona has given final approval for the class-action lawsuit against Banner Health, stemming from its June 2016 data breach that impacted more than 3.7...

Congress Presses Kushner on COVID-19 Health Data Surveillance Project

by Jessica Davis

Several members of Congress are pressing White House Advisor Jared Kushner amid privacy concerns, after reports showed the White House has assembled technology and healthcare firms to develop an...

Privacy Groups Urge Pence to Combat COVID-19 Fraud, Patient Harms

by Jessica Davis

A group of more than 30 national advocacy, industry, and research groups are calling on Vice President Mike Pence and the White House Coronavirus Task Force, the Department of Justice, and the Food and...

Sens. Probe Privacy, Cybersecurity of Apple COVID-19 Screening Tools

by Jessica Davis

Apple recently announced the launch of a new COVID-19 screening app and website based on guidance from the Centers for Disease Control and Prevention. In response, a group of Senators are looking into...