-
Jan 13, 2025 | 
jdsupra.com | Alisa Chestler |Layna Rush
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued a Notice of Proposed Rulemaking (NPRM) on December 27, 2024, to update the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule and its requirements. The official version was published on January 6, 2025. This is the first update in a decade for the security framework that has been in effect since 2003.
-
Oct 11, 2024 | 
jdsupra.com | Alisa Chestler |Layna Rush
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently settled two ransomware cases with covered entities. These cases signal the government's growing concern with health care organizations' ability to plan for and potentially remediate vulnerabilities prior to any third-party threat actor attempting to compromise a system.
-
Jun 24, 2024 | 
jdsupra.com | Alisa Chestler
In today's digital age, the health care industry faces a growing threat from scammers who don't have to use sophisticated cyberattacks; they can use the most routine task to steal information from unwitting and well-intentioned employees. All covered entities, providers, health plans, and their business associate partners must be aware of the latest scam directed at medical records departments.
-
Feb 20, 2024 | 
jdsupra.com | Alisa Chestler |Layna Rush
There has been a notable emphasis on proactive enforcement of the privacy and security of protected health information in recent weeks as evidenced by multiple developments regarding compliance with the Health Insurance Portability and Accountability Act (HIPAA). Recent developments include launching the HIPAA Audit Review Survey aimed at evaluating the effectiveness of past audits and gathering feedback – potentially foreshadowing the return of the audit program.
-
Nov 2, 2023 | 
healthcarefinancenews.com | Alisa Chestler
Reimbursement Strategic Planning Capital Finance Supply Chain Budgeting Quality and Safety Billing and Collections Claims Processing Workforce Operations Medical Devices Hospital/physician relations Compliance & Legal Policy and Legislation Community Benefit Accountable Care Acute Care Ambulatory Care Analytics Business Intelligence ICD-10 & Coding Meaningful Use Medicare & Medicaid Patient Engagement Pharmacy Population Health Risk Management Telehealth Mergers & Acquisitions Nov 02 Alisa...
-
Oct 3, 2023 | 
jdsupra.com | Alisa Chestler |Julie Kilgore
Are you a health care provider, business associate, or other entity subject to the requirements of the Health Insurance Portability and Accountability Act (HIPAA) regarding the use and disclosure of protected health information (PHI)? Do you know whether any of the web pages on your websites or mobile apps use third-party tracking technologies? Do you know what data you’re disclosing to third-party tracking technology companies and how that data is being used by those companies?
-
Aug 1, 2023 | 
corporatecomplianceinsights.com | Alisa Chestler
It’s official. Last week, the SEC issued rules requiring public companies to report what the agency calls “material” cybersecurity incidents within four business days. Baker Donelson’s Alisa Chestler breaks down what’s in the new rules and explores what companies should do from here. On July 26, the SEC passed rules regarding reporting “material cybersecurity incidents” within four business days of the determination, which will surely vex companies for years to come.
-
Jul 31, 2023 | 
jdsupra.com | Alisa Chestler
It is official. On July 26, 2023, the Securities and Exchange Commission (SEC) passed rules regarding reporting "material cybersecurity incidents" within four business days of the determination, which will surely vex companies for years to come. Public companies and their third-party vendors, including private companies, will feel the effects of these rules in their contracts and negotiations. Let's get into what happened and what companies should do now.
-
Jun 20, 2023 | 
cpomagazine.com | Michael McLaughlin |Alisa Chestler |Layna Rush |Matthew White
On May 31, 2023, renowned managed file transfer solution provider Ipswitch, Inc. revealed a zero-day vulnerability in its flagship solution, MOVEit Transfer, that can enable mass data theft from thousands of organizations. File transfer services play crucial roles in securing business and government operations, but companies must be aware of the inherent risks and adopt mitigations to safeguard against those risks.
-
May 8, 2023 | 
managedhealthcareexecutive.com | Alisa Chestler |Katherine Denney
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) published a Proposed Rule on April 17 to support reproductive healthcare privacy in the Federal Register. Through the Proposed Rule, OCR seeks to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to create heightened privacy standards for reproductive healthcare records.
