Jennifer Everett

Apr 1, 2024 | lexology.com | Alexis Gilroy |Lisa Ropple |Ryan Blaney |Claire Castles |Jennifer Everett |Kristen McDonald

New, first-of-their-kind consumer health data privacy laws in Washington and Nevada are designed to provide state-level protections for personal health data not covered by the Health Insurance Portability and Accountability Act ("HIPAA") and set the stage for potential increased litigation and enforcement.

Feb 23, 2024 | mondaq.com | Alexis Gilroy |Ryan Blaney |Claire Castles |Jennifer Everett

The Department of Health and Human Services ("HHS") has released voluntary cybersecurity performance goals for the health care and public health sectors, which outline an increasingly standardized regulatory approach and preview more intensive future enforcement efforts.

Jan 11, 2024 | mondaq.com | Alexis Gilroy |Claire Castles |Jennifer Everett |Kristen McDonald

The Department of Health and Human Services ("HHS") has released a concept paper outlining its new cybersecurity strategies for the health care sector, identifying cybersecurity priorities, potential future regulations and expectations of industry practices, and possible future enforcement. In December 2023, HHS released a paper outlining new cybersecurity strategies for the health care sector to improve cyber resiliency.

Dec 7, 2023 | mondaq.com | Alexis Gilroy |Lisa Ropple |Claire Castles |Jennifer Everett

The U.S. Department of Health and Human Services ("HHS") Office of Civil Rights ("OCR") has entered into its first settlement of potential Health Insurance Portability and Accountability Act ("HIPAA") violations arising out of a ransomware attack, signaling OCR's continued focus on data security.

Dec 6, 2023 | mondaq.com | Alexis Gilroy |Lisa Ropple |Jennifer Everett |Jeffrey L. Kapp

New York is the first state to propose cybersecurity requirements for all hospitals operating in the state to address patient safety and other cybersecurity related issues. On November 16, 2023, New York Governor Kathy Hochul proposed cybersecurity regulations applicable to all hospitals operating within the state.