Lisa Zivkovic

Apr 3, 2024 | lexology.com | William Ridgway |David Simon |Joshua M. Silverstein |Edward Gonzalez |Lisa Zivkovic

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently announced its second settlement in four months growing out of a ransomware attack on a health care business. Maryland-based Green Ridge Behavioral Health agreed to pay $40,000 and implement a corrective action plan after an investigation found potential violations of the Health Insurance Portability and Accountability Act (HIPAA) privacy and security rules.

Nov 22, 2023 | jdsupra.com | William Ridgway |David Simon |Lisa Zivkovic

Executive SummaryOn 16 October 2023, France’s Data Protection Authority, the National Commission on Informatics and Liberty (CNIL), issued a set of guidelines for complying with the EU General Data Protection Regulation (GDPR) when researching and developing AI systems (the Guidelines).1 The public consultation period for the Guidelines closed on 16 November 2023.