Health Care Law Blog

HIPAA Compliance Considerations During the Pandemic

This article has been updated with new information since it was originally published on November 16, 2020.

As health care providers continue to face new challenges relating to the COVID-19 pandemic, it is important for providers to maintain compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Although the Department of Health and Human Services Office for Civil Rights (“OCR”) has loosened some requirements to allow health care providers flexibility during the COVID-19 pandemic, a majority of the patient protections under the HIPAA Privacy Rule have remained intact. Read More ›

Categories: Compliance, Cybersecurity, Electronic Health Records, HIPAA

Posted by: Julie LaVille Hamlet

  |  Contact Author

Share  | 

Health Care Providers Face Growing Ransomware Risks, and Potential Sanctions for Paying Ransom

As if COVID-19 wasn’t enough of a challenge for many struggling hospitals and health care systems, there is another growing threat they must guard against: cyberattacks.

On October 28, 2020, the FBI, Department of Health and Human Services, and Cybersecurity and Infrastructure Security Agency issued a report warning of "an increased and imminent cybercrime threat" to U.S. hospitals and health care providers. Read More ›

Categories: Cybersecurity, Electronic Health Records, Hospice, Hospitals

Contact Author

Share  | 

Cybersecurity Concerns in Health Care

Health care systems are eager to adapt to newer technology and widespread network options, all in the name of giving patients the best possible care. However, this comes with a price: more outlets for hackers to breach valuable data.  Read More ›

Categories: Cybersecurity, Electronic Health Records

Posted by: Taylor A. Gast, Julie LaVille Hamlet, Caroline Renner (Summer Associate)

  |  Contact Author

Share  | 

HHS Office for Civil Rights Publishes Checklist for HIPAA Covered Entities Responding to Cybersecurity Incidents

The U.S. Department of Health and Human Service's Office for Civil Rights ("OCR") recently published guidance for entities covered by HIPAA, entitled "My entity just experienced a cyber-attack! What do we do now?" Read More ›

Categories: Cybersecurity, Digital Assets, Electronic Health Records, Fraud & Abuse, HIPAA

Posted by: Taylor A. Gast

  |  Contact Author

Share  |