HIPAA audit following breach reported to OCR results in findings of noncompliance, settlement payment of $1.7 million and a three-year corrective action plan.
Continue Reading Alaska DHSS HIPAA Breach Affects 501 Individuals, But Results in $1.7 Million Settlement with HHS Following Compliance Review
Joseph J. Lazzarotti
Joseph J. Lazzarotti is a principal in the Tampa, Florida, office of Jackson Lewis P.C. He founded and currently co-leads the firm's Privacy, Data and Cybersecurity practice group, edits the firm’s Privacy Blog, and is a Certified Information Privacy Professional (CIPP) with the International Association of Privacy Professionals. Trained as an employee benefits lawyer, focused on compliance, Joe also is a member of the firm’s Employee Benefits practice group.
In short, his practice focuses on the matrix of laws governing the privacy, security, and management of data, as well as the impact and regulation of social media. He also counsels companies on compliance, fiduciary, taxation, and administrative matters with respect to employee benefit plans.
Connecticut Amends Data Breach Notification Statute; Notice to Attorney General Now Required
Notice to Connecticut Attorney General now required following data breaches affecting state residents.
Continue Reading Connecticut Amends Data Breach Notification Statute; Notice to Attorney General Now Required
Vermont Becomes Eighth State to Limit Access and Use By Employers of Credit Information
Effective July 1, 2012, Vermont joins California, Connecticut, Hawaii, Illinois, Maryland, Oregon, and Washington as jurisdictions that restrict an employer’s right to obtain and use credit information for making employment decisions. Similar legislation is pending in many other jurisdictions. Click here for more information about the Vermont law.
Vermont Strengthens Data Breach Notification Requirements
14-day Attorney General notice and other amendments to Vermont’s Security Breach Notice Act further complicate data breach response.
Continue Reading Vermont Strengthens Data Breach Notification Requirements
HHS Makes HIPAA Training Materials Available to State Attorneys General
Federal HIPAA enforcement agency adds new online tool to train State Attorneys General to enforce HIPAA.
Continue Reading HHS Makes HIPAA Training Materials Available to State Attorneys General
Illinois Next in Prohibiting Employers from Demanding Social Media Passwords?
Illinois next in the line of states seeking to prohibit employers from asking employees and applicants for their Facebook and other social media passwords.
Continue Reading Illinois Next in Prohibiting Employers from Demanding Social Media Passwords?
California to Follow Maryland in Prohibiting Employers from Demanding Social Media Passwords From Employees
California Assembly moves bill (voting 73-0) that would make California the second state behind Maryland to prohibit employers from demanding social media passwords.
Continue Reading California to Follow Maryland in Prohibiting Employers from Demanding Social Media Passwords From Employees
Employee’s Secretly Tape Recording Manager Can Be Protected Activity, a Federal Appellate Court Rules
Disciplining an employee for secretly recording a meeting with a supervisor could violate an employee’s protected concerted activity rights under U.S. labor law.
Continue Reading Employee’s Secretly Tape Recording Manager Can Be Protected Activity, a Federal Appellate Court Rules
Massachusetts Company Fined $15,000 Under State’s Data Security Law
The Massachusetts AG’s enforcement of its data security law demonstrates that it does not take lightly the loss of Massachusetts residents’ personal information, even if that loss has not caused any known harm to the affected residents, and that it may remain watchful over the subject of an investigation for years to come.
Continue Reading Massachusetts Company Fined $15,000 Under State’s Data Security Law
Maryland Prohibits Employers From Demanding Social Media Passwords
New Maryland law prohibits employers from demanding access to Facebook or other on line accounts of employees and applicants…
Continue Reading Maryland Prohibits Employers From Demanding Social Media Passwords