HHS settles charges of violations of HIPAA privacy rule; recent actions suggest now is a good time to evaluate HIPAA policies and procedures *

USA - August 4 2010
The U.S. Department of Health and Human Services (HHS) recently announced the settlement of charges against Rite Aid Corp. for alleged violations of the Health Information Portability and Accountability Act of 1996 (HIPAA) Privacy Rule.

Co-authors: Carol A. Poindexter.

Missouri passes new data security breach law *

USA - July 17 2010
Missouri Governor Jay Nixon recently signed into law new requirements pertaining to breaches in the security of personal information.

Co-authors: James M. Beck.

Sweeping changes to HIPAA rules proposed *

USA - July 14 2010
The U.S. Department of Health and Human Services (HHS) has announced its highly anticipated notice of proposed rulemaking (NPRM) to modify the Standards for Privacy of Individually Identifiable Health Information (Privacy Rule), the Security Standards for the Protection of Electronic Protected Health Information (Security Rule), and the rules pertaining to Compliance and Investigations, Imposition of Civil Money Penalties, and Procedures for Hearings (Enforcement Rule) (collectively, the HIPAA Rules) issued under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Co-authors: Carol A. Poindexter.