Cyber Attack Quick-Response Checklist for HIPAA Covered Entities
Written by: Anthony E. Stewart, Esq. Ransomware attacks, like other cyber-attacks, are occurring more and more frequently, and healthcare entities are common targets. The U.S. Department of Health and Human Services Office for Civil Rights (O
PART 2: The European Union’s General Data Protection Regulation: Two Important Steps to Take
Featured on Hospitality Upgrade Magazine’s Tech Talk. Written by: Sam Crochet, Esq. In my June column, we discussed why the General Data Protection Regulation (GDPR) matters to the hospitality industry and the technical/organizational step
The European Union’s General Data Protection Regulation: What Steps Must Members of the Hospitality Industry Take?
Featured on Hospitality Upgrade Magazine’s Tech Talk. Written by: Sam Crochet, Esq. US companies collect, analyze, and leverage consumer data to optimize efficiency, advertise and, hopefully, increase profits. However, with the rise of data
Advice on Selecting a Data Protection Officer
Written by: Sean Cox, Esq. Having a single person responsible for a company’s data privacy and security has long been good business practice, but for many it will soon be a legal requirement. The GDPR requires that organizations under its aus
4th Circuit Severely Limits Data Breach Lawsuits
Written by: Sean Cox, Esq. A recent decision from the Federal 4th Circuit Court of Appeals is likely to make it much harder for plaintiffs within its borders bringing lawsuits following a data breach. In Beck v. McDonald1), the 4th Circuit Cou
Data Breach Plaintiffs Find New Ways Around Landmark Supreme Court Decision
Written by: Sam Crochet, Esq. In-house counsels are facing growing pressure to perform risk assessments and address internal policies to avoid data breaches for a new reason (as if they needed one). Data breach plaintiffs, depending on the stat
Failure To Learn From Own Mistakes Leads To $3.2 Million HIPAA Penalty
Written by: Richard Sheinis, Esq. A mistake is nothing more than an opportunity to learn. Of course, you have to take advantage of that opportunity. Children’s Medical Center of Dallas failure to take that opportunity has led to a HIPAA civil
FTC Fines VIZIO $2.2 Million For Collecting Viewer Data Without Consent
Written by: Richard Sheinis, Esq. Vizio, Inc., one of the world’s largest manufacturers of internet connected televisions has agreed to pay $2.2 million to settle charges by the Federal Trade Commission and the New Jersey Attorney General tha
OCR Gives Another Expensive Lesson in HIPAA Security Compliance
Written by: Richard Sheinis, Esq. The U.S. Department of Health and Human Services, Office of Civil Rights (“OCR”) has agreed to a $2.2 million settlement with MAPFRE Life Insurance Company of Puerto Rico for potential non-compliance with t
Medical Provider To Pay $475,000 For Failing To Timely Report The Loss Of PHI
Written by: Richard Sheinis, Esq. The importance of timely reporting breaches of Protected Health Information (“PHI”) is now underscored by the U.S. Department of Health and Human Services (“HHS”) first ever enforcement action against a