The HITECH Act requires FTC, in consultation with HHS, to study potential privacy, security and breach notification requirements for vendors of personal health records (“PHRs”) and other entities that ...

The Federal Communications Commission (“FCC”) achieved victory this week as the U.S. Court of Appeals for the Sixth Circuit upheld a heavily contested set of new data breach reporting requirements for ...

The FCC has broad authority under the Communications Act of 1934 to regulate interstate telephone communications, including, under 47 U.S.C. § 201(b), the authority to ensure that “[a]ll charges, ...

The Federal Trade Commission (FTC) updated its health breach notification rule (HBNR) on April 26, 2024. The final rule expanded the scope of the HBNR to cover health applications and similar ...

3. Final rule on Breach Notification for Unsecured Protected Health Information under the HITECH Act, which replaces the breach notification rule’s “harm” threshold with a more objective standard and ...

A dermatology practice in Massachusetts has agreed to a $150,000 settlement with HHS for not having procedures in place to fulfill HIPAA’s breach notification provisions. The HHS Office for Civil ...

Reading news headlines or opening the mailbox to another data breach notification letter emphasizes that a data incident is more likely to be a “when” and not an “if” for your organization. While long ...