HHS broadens notification obligations in final data breach notification rule *

USA - February 4 2013
As we reported here, the U.S. Department of Health and Human Services ("HHS") recently issued final regulations (the "Final Rule") implementing…

Co-authors: David S. Szabo, Karen L. Booth.

---

New HIPAA regulations released *

USA - January 18 2013
On January 17, 2013, the U.S. Department of Health and Human Services released final regulations implementing changes to HIPAA mandated by the HITECH…

Co-authors: Leslie J. Levinson, David S. Szabo, Michaela B. Tabela, Eric D. Fader.

---

Lessons from Utah *

USA - April 23 2012
There are lessons to be learned or reinforced by the breach of a database maintained by the Utah Department of Health (UDOH).

Co-authors: Eric D. Fader.

---

March 1 deadline for companies and vendors with Massachusetts personal information *

USA - January 30 2012
By March 1, 2012, companies with personal information of Massachusetts residents must amend their existing contracts with vendors that handle such information to require the vendors’ compliance with the Massachusetts data security regulations.

Co-authors: Socheth Sor, Laurie A Kamaiko, Mark E. Schreiber.

---

Everyone’s nightmare: privacy and data breach risks *

USA - January 28 2011
In the last few years, there has been an increasing number of well-publicized stories of breaches of confidential information.

Co-authors: Laurie A Kamaiko, Mark E. Schreiber.

---