• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

HHS

New Law Requires HHS to Consider Recognized Security Practices as Mitigating Factor When Determining Penalties

January 21, 2021 By Privacy, Cyber & Data Strategy Team

On January 5, 2021, the president signed into law H.R. 7898, an Act that amends the Health Information Technology for Economic and Clinical Health (HITECH) Act to require the Secretary of Health and Human Services (HHS) to consider specific recognized security practices of covered entities and business associates when making certain determinations regarding fines, penalties, […]

Filed Under: Board Governance & Cyber Risk Management, HIPAA/Health Information Privacy, Security & Breach Response, Privacy & Cyber Regulatory Enforcement Tagged With: HHS, HIPAA, HITECH, National Institute for Standards and Technology (NIST)

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • CalPrivacy Goes to the Board with Digital Advertising-Focused Enforcement
  • The FTC’s COPPA Policy Statement to Incentivize Age Verification Through a More Flexible Enforcement Approach
  • NYDFS Revises Prescriptive FAQs on Multifactor Authentication
  • Threat Actors Exploit Google’s Gemini to Accelerate Cyberattacks
  • CISA Revives CIRCIA Rulemaking
Copyright © 2026 · Alston & Bird · All Rights Reserved. Privacy.