Tagged: OCR

HIPAA on the Horizon in the New Year: Important Lessons from an Active 2023 and Regulatory Initiatives to Watch for in 2024

2023 marked 20 years since the first compliance deadline under the Health Insurance Portability and Accountability Act’s (“HIPAA”) privacy rule. Despite the two decades of experience with HIPAA, compliance continues to remain a challenge for HIPAA-covered entities as well as for their business associates. 2023 brought a large number of important HIPAA-related developments and lessons-learned...

HHS OCR Settles HIPAA Investigation with Business Associate for $350,000

Over the past decade, the number of health care data breaches reported to the U.S. Department of Health and Human Services’ Office for Civil Rights (“OCR”) has increased dramatically. From 2009 to 2022, over 5,000 data breaches affecting 500 or more records were reported to OCR, accounting for the exposure of over 380 million health...

The “Regulatory Sprint to Coordinated Care” – Overview and Links to Further Resources from Dorsey & Whitney

In 2018, the U.S. Department of Health and Human Services (“HHS”) launched the “Regulatory Sprint to Coordinated Care” to accelerate a transformation of the healthcare system, with a focus on removing “unnecessary obstacles” to coordinated care (the “Regulatory Sprint”). Several HHS agencies requested comments and information from the public and have published new or proposed...

The Regulatory Sprint Catches up to HIPAA: New Proposed HIPAA Rules

Today, the Department of Health and Human Services’ (“HHS”) Office for Civil Rights (“OCR”) issued a Notice of Proposed Rulemaking (“NPRM”) which proposes significant changes to the Health Insurance Portability and Accountability Act (“HIPAA”) and to the Health Information Technology for Economic and Clinical Health Act (“HITECH”) Privacy Rule (the “Privacy Rule”).  The NPRM includes...

2020’s a Bust, but HIPAA Enforcement Is on a Roll!

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has been actively enforcing HIPAA regulations this year, including a series of seven settlements under OCR’s Right of Access Initiative to enforce patients’ rights to timely access their medical records at a reasonable cost. This year, OCR has recorded...

New HIPAA Waivers for Health Care Providers During the COVID-19 Emergency

This post provides an update on a number of HIPAA waivers that have just been made available to health care providers: (1) Waivers for hospitals in the initial 72 hours of enacting a disaster protocol; and (2) Waivers for all health care providers to allow them to use “everyday communications technologies, such as FaceTime or...

CMS “Actively Working” on Stark Law Reforms to be Issued Later this Year; “Regulatory Sprint to Coordinated Care” Continues

The Centers for Medicare & Medicaid Services (CMS) is “actively working” on updates to regulations under the federal physician self-referral law (or “Stark Law”), according to CMS Administrator Seema Verma during a March 4, 2019 speech. Verma stated that the updated regulations will be issued later this year, and “will represent the most significant changes...

How HHS’s New Division in the Office for Civil Rights Will Enforce Rights of Conscience and Religious Freedom

    When the U.S. Department of Health and Human Services (“HHS”) announced a new Conscience and Religious Freedom Division in the HHS Office for Civil Rights (“OCR”), it framed a problem and a solution. The press release stated that “fundamental and unalienable rights of conscience and religious freedom” are not being fully enforced on...