Best Cybersecurity Practices for Healthcare Organizations – Loss or Theft of...
This article is part of a series of blog posts exploring the recommendations and guidance Health & Human Services (HHS) provides to healthcare organizations in its Cybersecurity Best Practices...
View ArticleBest Cybersecurity Practices for Healthcare Organizations – Insider-Caused...
This article is part of a series of blog posts exploring the recommendations and guidance Health & Human Services (HHS) provides to healthcare organizations in its Cybersecurity Best Practices...
View ArticleTrojan Malware Reclaims the Top Spot as the Greatest Cyber Threat to the...
Cybersecurity threats continued to plague the healthcare sector in 2018. Healthcare organizations notified twice as many individuals under HIPAA and other notification statutes in 2018 as compared with...
View ArticleDeter Workforce Snooping in Electronic Medical Records Through Education and...
On March 6, 2019, the U.S. Department of Justice (DOJ) announced that Linda Sue Kalina pled guilty to wrongfully disclosing the protected health information (PHI) of another individual in violation of...
View ArticleRisk Management Strategies to Reduce Risk Associated with Telehealth
The use of technology to provide healthcare has existed for decades; however, recent advances in technology and changes in reimbursement have increased the prevalence of telehealth for diagnosing and...
View ArticlePowerful Protection: The Healthcare Privacy and Compliance Team
The following story is one in a six-part series devoted to the pioneering teams that comprise the firm’s new Digital Asset and Data Management Practice Group. A prime example of BakerHostetler’s...
View ArticleHealthcare Providers Remain Targets for Ransomware Attacks in the Midst of...
Although it was widely reported that several ransomware threat actor groups have pledged to not target healthcare providers until the COVID-19 pandemic is over, BakerHostetler’s Digital Assets and...
View ArticleCARES Act Significantly Revises Part 2 Rules to Better Align with HIPAA
On March 27, 2020, President Trump signed the Coronavirus Aid, Relief, and Economic Security Act (the “CARES Act”) into law. While the focus of the CARES Act has been on direct financial aid to...
View ArticleDSIR Deeper Dive: Regulatory Investigation Landscape
HIPAA-covered entity and business associate breaches continue to draw attention from the Office for Civil Rights (OCR) and other regulators. In almost every HIPAA incident we handled in 2019 involving...
View ArticleWarning of Cybersecurity Threat to Healthcare Sector – Imminent Threat of...
BakerHostetler is closely monitoring a Cybersecurity Advisory issued jointly by several government agencies including the United States Department of Health and Human Services (HHS) and the FBI, on...
View ArticleONC Announces Delay of Information Blocking Provisions
The Department of Health and Human Services’ (HHS)’ Office of the National Coordinator (ONC) published an interim final rule today delaying several key compliance deadlines in the ONC 21st Century...
View ArticleCISA Updates Advisory on Large-Scale Impending and Credible Ransomware Threat...
On Oct. 28, a joint cybersecurity advisory was published by the Cybersecurity and Infrastructure Security Agency (CISA), the FBI and the Department of Health & Human Services. The advisory warned...
View ArticleRansomware, COVID-19 and Regulations: Healthcare Entities Confront a Triple...
Given what the healthcare industry faced in 2020, the seventh edition of our Data Security Incident Response (DSIR) Report, “Disruption and Transformation,” is aptly titled. As if fighting the COVID-19...
View ArticleWhy Everyone Is Talking About a Rarely Invoked Rule – the FTC’s Health Breach...
Back in September, the Federal Trade Commission (FTC) issued (by a 3-2 vote) a policy statement (the Statement) regarding the oft-forgotten Health Breach Notification Rule (the Rule). I was at the FTC...
View ArticleOCR Announces Four Enforcement Actions
On March 28, 2022, Health and Human Services, Office for Civil Rights (OCR) announced the resolution of four enforcement actions, three resolved in 2021 and one resolved in 2022. There are some...
View Article