• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

HIPAA

OCR and ONC Release New Security Risk Assessment Tool

April 3, 2014 By Privacy, Cyber & Data Strategy Team

Late last week, the HHS Office for Civil Rights (OCR) and Office of the National Coordinator for Health Information Technology (ONC) released a security risk assessment (SRA) tool designed to help health care providers conduct risk assessments as required by the HIPAA Security Rule.  Under the Security Rule, health care providers must perform risk assessments […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement Tagged With: Health Information Security, HIPAA, HITECH

HIPAA Audit Program Returning?

February 26, 2014 By Privacy, Cyber & Data Strategy Team

We previously blogged about the Office for Civil Rights’ (OCR) HIPAA Privacy, Security and Breach Audit Program (HIPAA Audit Program) on November 30, 2011, March 7, 2012, and June 26, 2012. On Monday, OCR published a notice  in the Federal Register in which it essentially announces the return of its HIPAA Audit Program. In the notice, […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response Tagged With: Health Information Security, HIPAA, HITECH

OCR Issues New Guidance on the HIPAA Privacy Rule and Sharing of Mental Health Information

February 25, 2014 By Privacy, Cyber & Data Strategy Team

Late last week, the HHS Office for Civil Rights (OCR) published guidance designed to help health care providers understand when, consistent with the HIPAA Privacy Rule, they may share information related to a patient’s mental health with others.  As we have previously written, HHS seeks to balance a patient’s privacy rights in mental health records […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement Tagged With: HIPAA

New CMS and OCR Rule Provides Patients with Access to Laboratory Test Results

February 6, 2014 By Privacy, Cyber & Data Strategy Team

Today, the Centers for Medicare & Medicaid Services (CMS), the HHS Office for Civil Rights (OCR) and the Centers for Disease Control and Prevention (CDC) published a final rule in the Federal Register, amending the Clinical Laboratory Improvement Amendments of 1988 (CLIA) regulations and the HIPAA Privacy Rule  to provide patients with greater access to their lab […]

Filed Under: HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement Tagged With: HIPAA

House of Representatives Passes Health Exchange Security and Transparency Act of 2014: HR 3811 Would Require HHS to Notify Affected Individuals of a Breach of a Health Insurance Exchange Within 2 Days of Discovery

January 14, 2014 By Privacy, Cyber & Data Strategy Team

On Friday, January 10, 2014, the House of Representatives passed H.R. 3811, the “Health Exchange Security and Transparency Act of 2014” by a vote of 291 to 122. The bill was introduced on January 7, 2014 by Representative Joe Pitts (R-PA), and has a total of 75 cosponsors. Under the bill, the Secretary of Health […]

Filed Under: Board Governance & Cyber Risk Management, Crisis & Data Breach Response, Privacy & Cyber Regulatory Enforcement Tagged With: Health Information Security, HIPAA, HITECH, House of Representatives, Senate, The White House, US Congress

  • « Go to Previous Page
  • Page 1
  • Interim pages omitted …
  • Page 3
  • Page 4
  • Page 5
  • Page 6
  • Page 7
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • The FTC’s COPPA Policy Statement to Incentivize Age Verification Through a More Flexible Enforcement Approach
  • NYDFS Revises Prescriptive FAQs on Multifactor Authentication
  • Threat Actors Exploit Google’s Gemini to Accelerate Cyberattacks
  • CISA Revives CIRCIA Rulemaking
  • Genetic Goldmine or Legal Landmine? Tempus AI Confronts GIPA Exposure
Copyright © 2026 · Alston & Bird · All Rights Reserved. Privacy.