Elizabeth Neal Pitman

Jun 27, 2024 | lexology.com | Elizabeth Neal Pitman

HighlightsThe U.S. Department of Health and Human Services (HHS) has finalized information blocking disincentives for healthcare providers and set the stage for future enforcement actions. Continuing HHS' commitment to encouraging permitted access to and exchange of electronic health information, the final rule specifically focuses on establishing disincentives for healthcare providers found by the HHS Office of Inspector General to have committed information blocking.

Jun 25, 2024 | lexology.com | Paul Bond |Shannon Britton Hartsfield |Elizabeth Neal Pitman

HighlightsThe ruling in American Hospital Association v. Becerra is a victory for Health Insurance Portability and Accountability Act (HIPAA) covered entities using third-party tracking tools on unauthenticated webpages. Although the decision does not immediately end the many class actions brought against healthcare providers regarding website cookie and pixel use, the decision should make such lawsuits significantly less attractive to plaintiffs.

Jun 4, 2024 | lexology.com | Elizabeth Neal Pitman |Eddie Williams III |Shannon Britton Hartsfield

HighlightsAt long last, covered entities with protected health information affected by the February 2024 cyberattack on Change Healthcare now have some clarity regarding Health Insurance Portability and Accountability Act (HIPAA) breach notice obligations. Guidance, in the form of updated FAQs, indicate that all affected covered entities may delegate HIPAA notice obligations to Change Healthcare.

May 13, 2024 | lexology.com | Elizabeth Neal Pitman |Eddie Williams III |Shannon Britton Hartsfield

HighlightsU.S. Health and Human Services Office for Civil Rights (OCR) Director Melanie Fontes Rainer speaks at length on the growing threat of ransomware cyberattacks, upcoming rule changes and enforcement priorities. Health Insurance Portability and Accountability Act (HIPAA) risk analysis initiative addresses inadequate security risk analysis and management that are often at the root of data breaches.

Mar 19, 2024 | lexology.com | Elizabeth Neal Pitman |Shannon Britton Hartsfield

HighlightsThe U.S. Department of Health and Human Services Office for Civil Rights (OCR), which enforces the Health Insurance Portability and Accountability Act (HIPAA), has issued an update to its prior guidance on the uses of tracking technologies by healthcare companies.