Health Care Counsel

Arent Fox's health care law blog offers news, analysis, and insights for the health care industry.

Health Care Counsel

HIPAA / Health Privacy & Security

Arent Fox began advising clients in matters involving the privacy and security of health information long before the final promulgation of the Privacy and Security Standards under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). In fact, we represented clients before Congress and HHS throughout the negotiations of the Administrative Simplifications Provisions of HIPAA and the crafting of the final regulations. We also developed a comprehensive model HIPAA compliance program that enables health care providers to implement the Federal Privacy Standards in a systematic and efficient manner.

Given the depth of our HIPAA experience, we are uniquely positioned to provide our clients with a comprehensive, cost-effective means to incorporate new HIPAA and HITECH requirements into existing compliance programs, assess their obligations under the new data breach notification requirements, and unravel the complex HIPAA issues that frequently arise in the context of clinical research. Clients facing a HIPAA enforcement action can turn to Arent Fox with confidence knowing that one of our attorneys was involved in the resolution of the largest HIPAA enforcement case to date.

ruling

The Fourth Circuit Holds That The Mere Threat of Future Harm Is Insufficient to Confer Standing On Victims of a Data Breach

A recent decision from the Fourth Circuit Court of Appeals in Beck v. McDonald, 848 F.3d 262 (4th Cir. 2017), adds to the list of circuit courts of appeal that have held that that the mere threat of future harm resulting from a data breach, without more, is insufficient to satisfy the injury-in-fact requirement for Article III standing.

alert

Regulation from Across the Pond: GDPR’s Implications for United States Health Care Organizations

alert

Substance Abuse Medical Record Privacy Rules Updated For The First Time in Nearly 30 Years

For the first time in nearly three decades, the Substance Abuse and Mental Health Services Administration (SAMHSA) has updated the regulations on the confidentiality of substance abuse treatment records found in 42 C.F.R. Part 2 (the Part 2 Regulations).

alert

Your Money or Your Patients: Using IT Contracts to Protect Against Ransomware Attacks

An Austrian hotel was a recent victim of a “ransomware” computer attack that disabled its electronic room key system and locked up its own computers, and this follows ransomware attacks on hospitals. These attacks demonstrate that hospital administrators should be sure that IT agreements adequately address the risks of cyberattacks. Moreover, this important lesson applies to health care institutions as ransomware causes great harm because it locks up and makes patient and other records unavailable at the very time they are required for ongoing medical care.

webinar

Health Care Compliance Association (HCCA) Webinar: Navigating the Rest of the Iceberg - Privacy and Security Compliance Beyond HIPAA

Please join Arent Fox partners Sarah Bruno, Jade Kelly and Matthew Mills on Tuesday, February 21 from 1:00-2:30 PM Eastern for a Health Care Compliance Association webinar titled Navigating the Rest of the Iceberg: Privacy and Security Compliance Beyond HIPAA

alert

At PrivacyCon, Researchers Discuss Today’s New Technologies, Highlight Not-So-New Privacy and Security Issues

alert

Life’s a Breach - Sitting on that HIPAA Breach Notification Could Burn You

What’s the News?

On January 9, 2017, Presence Health agreed to settle with the U.S. Department of Health and Human Services (HHS) potential violations under the Breach Notification Rule of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). This is HHS’ first enforcement action against a covered entity that reported a breach, but did not do so timely.

alert

FTC Arms Businesses and Consumers Against Ransomware

Ransomware is a living-nightmare for the health care industry, with attacks or threats of attacks increasing and the consequences potentially devastating to patients and businesses. The Federal Trade Commission recently issued guidance for both businesses and consumers on defending against ransomware, which Arent Fox attorneys Sarah Bruno, Eva Pulliam, and Lourdes Turrecha analyze in the article below.

What’s the News?

alert

Are Fitness Apps Fit for Privacy Protection?

* The following article was originally published by Healthcare Informatics. To read it on the Healthcare Informatics website, click here

Healthcare professionals who are in a position to recommend the use of fitness apps need to be aware that patients’ personal data can be used in ways that HIPAA would prohibit and that will surprise patients who are trying to be smart about fitness in a smartphone world.

alert

Needing to Adjust: DOJ and HHS Announce Steep Increases to FCA, Stark Law, Anti-Kickback Statute, and EMTALA Penalties

Life science companies, health care providers, and government contractors will be at risk for significantly larger penalties due to substantial increases to False Claims Act (FCA) penalties and civil monetary penalties (CMPs). These penalty increases cover a broad range of health care violations, including the Stark Law, the Anti-Kickback Statute, the Emergency Medical Treatment and Labor Act (EMTALA) and the Health Insurance Portability and Accountability Act (HIPAA).

Pages

Subscribe to RSS - HIPAA / Health Privacy & Security

SUBSCRIBE

Add the Arent Fox Health Care Law blog to your RSS feed reader.

Arent Fox In Your Inbox
To subscribe to Arent Fox Alerts and other news, click here.

ABOUT ARENT FOX LLP

Arent Fox LLP, founded in 1942, is internationally recognized in core practice areas where business and government intersect. With more than 350 lawyers, the firm provides strategic legal counsel and multidisciplinary solutions to clients that range from Fortune 500 corporations to trade associations. The firm has offices in Los Angeles, New York, San Francisco, and Washington, DC.