Medical billing company’s alleged dumping of medical records results in $140K settlement with Massachusetts Attorney General.
Continue Reading Massachusetts AG Coakley Announces $140K Settlement Following Public Dumping of HIPAA PHI by Medical Billing Service Provider
Information Management
Are Cloud Service Providers Business Associates under HIPAA and the HITECH Act?
Is your cloud service provider HIPAA-compliant?
Continue Reading Are Cloud Service Providers Business Associates under HIPAA and the HITECH Act?
Start 2013 On The Right Foot – Assess Your Organization’s Information Risk
The $50,000 in penalties that the Office for Civil Rights (OCR) recently imposed on a health care provider in Idaho was due in part to allegations that the HIPAA covered entity had not conducted a risk assessment as required under the HIPAA privacy and security regulations. Of course, HIPAA is not the only law that requires a risk…
Small HIPAA Breach (Affecting Fewer Than 500) Leads to Substantial Penalties
HIPAA data breach affecting 441 patients leads to investigation resulting in $50K in penalties due to alleged lapses in security compliance.
Continue Reading Small HIPAA Breach (Affecting Fewer Than 500) Leads to Substantial Penalties
California Employees Get New Rights to Personnel Records Beginning in 2013
California Governor Jerry Brown has signed into law (AB 2674) new requirements specifying when and how employers must respond to their employees’ requests for inspection and copying of their personnel files. The new requirements become effective January 1, 2013.
California AG Begins Enforcing the State’s Online Privacy Protection Act for Websites, Aps
California AG begins enforcing the state’s Online Privacy Protection Act which requires commercial operators of online services, including websites and mobile and social apps, that collect personally identifiable information from Californians to conspicuously post a privacy policy.
Continue Reading California AG Begins Enforcing the State’s Online Privacy Protection Act for Websites, Aps
Sandy – A Reminder to Adopt/Reevaluate Your Disaster Recovery Plan
The effects of a hurricane like Sandy should be a reminder to all businesses of the importance of disaster recovery planning. When these storms threaten there is no shortage of images of sandbags and plywood being used to prevent harm to companies’ bricks and mortar. However, rarely do we see steps businesses should be taking to protect…
South Carolina Supreme Court Addresses When Email is Backed-Up Under the Stored Communications Act
Are emails saved in one’s Yahoo! account stored for backup protection under the Stored Communications Act?
Continue Reading South Carolina Supreme Court Addresses When Email is Backed-Up Under the Stored Communications Act
FTC Continues Push Against Data Brokers
As we have referenced in previous posts, the Federal Trade Commission (FTC) has launched an aggressive push against data brokers and credit reporting agencies in its enforcement of the rules under the Fair Credit Reporting Act (FCRA). That push continues today with the U.S. Department of Justice’s announcement of the prosecution of a…
DOD, GSA, and NASA Propose New Rule Affecting Federal Contractor Requirements to Safeguard Government Information
Attention federal contractors – DOD, GSA and NASA propose adding a required contract clause for federal contractors to address data security.
Continue Reading DOD, GSA, and NASA Propose New Rule Affecting Federal Contractor Requirements to Safeguard Government Information