Sarah Rugnetta

Mar 22, 2024 | jdsupra.com | Jordan Fischer |Sarah Rugnetta

The updated guidance came after a group of hospitals and health care groups sued the OCR over its previous guidance on the topic (the plaintiffs claim, among other things, that the rule was issued improperly and that it misinterprets the requirements of the privacy rule). Unfortunately, the updated guidance still leaves some questions unanswered. Both the previous and updated guidance documents differentiate between user-authenticated and unauthenticated web pages.

Mar 22, 2024 | constangy.com | Sebastian Fischer |Sarah Rugnetta |John C. Babione |Jason S. Cherry

The updated guidance came after a group of hospitals and health care groups sued the OCR over its previous guidance on the topic (the plaintiffs claim, among other things, that the rule was issued improperly and that it misinterprets the requirements of the privacy rule). Unfortunately, the updated guidance still leaves some questions unanswered. Both the previous and updated guidance documents differentiate between user-authenticated and unauthenticated web pages.

Feb 29, 2024 | jdsupra.com | Jordan Fischer |Sarah Rugnetta

In its settlement order, the Attorney General focused on DoorDash’s sale and sharing of personal information in a marketing cooperative, finding that DoorDash sold its California customers’ personal information without providing notice or an opportunity to opt out of the sale of their personal information.

Feb 29, 2024 | constangy.com | Jordan Fischer |Sarah Rugnetta |John C. Babione

In its settlement order, the Attorney General focused on DoorDash’s sale and sharing of personal information in a marketing cooperative, finding that DoorDash sold its California customers’ personal information without providing notice or an opportunity to opt out of the sale of their personal information.

Jan 8, 2024 | jdsupra.com | Jordan Fischer |Sarah Rugnetta

Key changes to the RegulationTiered obligations and exemptions. Entities licensed by the DFS should first assess whether they are a “Small Business” or a “Class A Business,” as well as whether they fall within one of the exemptions based on factors outlined in the amended regulation. This will determine which, if any, requirements apply to their business. Cybersecurity governance.