August 21, 2026
Health care providers awaiting final changes to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule may have to wait a little longer. According to Reginfo.gov, the federal government’s website for [...]
April 30, 2026
A recent lawsuit filed in California challenges the use of an artificial intelligence (AI)-based transcription tool by two organizations. The complaint alleges that Sutter Health and Memorial Healthcare Services improperly used an [...]
April 23, 2026
On February 13, 2026, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a new civil enforcement program focused on protecting the confidentiality of substance use [...]
April 1, 2026
Feldesman Health Care Compliance Counsel Natalie Lesnick will present “Challenges for Small Covered Entities: How to Build a Robust Privacy/Security Program with Limited Resources” at the 43rd HIPAA Summit, taking place April [...]
October 21, 2025
In an increasingly busy world, it’s easy for patients to forget appointments scheduled weeks, or even months, in advance. For health centers, however, missed appointments can be costly and may hinder efforts [...]
October 17, 2025
Health centers should exercise increasing caution when using website tracking technologies, such as browser fingerprints, cookies, and web beacons, particularly in light of recent enforcement activity. In a recent settlement, LCMC Health [...]
October 16, 2025
Health centers collect and store large amounts of Protected Health Information (PHI), which carries significant risks and responsibilities. Partnering with a business associate to assist with your health center's work means you [...]
July 24, 2025
On June 18, 2025, a federal judge in Texas issued a nationwide injunction vacating the HIPAA Privacy Rule to Support Reproductive Health Care Privacy[1] ("Reproductive Privacy Rule").[2] Originally published on April 26, [...]
July 7, 2025
On June 6, 2025, Jackson Health System of Miami, Florida, announced that it had fallen victim to an insider data breach affecting more than 2,000 patients. According to its press release, an [...]
April 25, 2025
OCR’s New Security Risk Analysis Initiative Results in Seven Enforcement Actions in First Six Months
In the fall of 2024, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced the first enforcement action in its “Risk Analysis Initiative.” Since then, a [...]

