We use cookies to customise content for your subscription and for analytics.
If you continue to browse Lexology, we will assume that you are happy to receive all our cookies. For further information please read our Cookie Policy.
Lexology logo
  Request new password

Search results

Order by most recent / most popular / relevance

Results: 1-10 of 24

Deadline approaches for reporting 2012 small breaches

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • February 25 2013

HIPAA covered entities have through Friday, March 1, 2013, to report small breaches of unsecured protected health information that occurred in

New omnibus rule released: HIPAA puts on more weight

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • January 23 2013

On Jan. 17, 2013, the Department of Health and Human Services (HHS) released the long-awaited "Omnibus Rule," which amends the administrative

One week to get business associate agreements executed under HIPAA Omnibus Rule’s grandfather clause

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • January 18 2013

On Jan. 17, 2013, the long-awaited HIPAA "Omnibus Rule" went on display at the Federal Register, finalizing changes to the HIPAA Privacy, Security

HIPAA Omnibus Rule released

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • January 17 2013

At long last, after much delay and speculation, the HIPAA Omnibus Rule has been placed on display at the Federal Register in preparation for formal

Small data breach leads to $50,000 hhs settlement for hospice

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • January 2 2013

In what HHS declares as “the first settlement involving a breach of unprotected electronic protected health information (ePHI) affecting fewer than 500

HHS creates mobile device privacy and security website: high expectations for mobile device security

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • December 20 2012

The U.S. Department of Health and Human Services recently posted a website focusing on mobile devices and health information privacy and security at

Escaping HIPAA: new guidance on de-identifying health information

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • November 29 2012

HIPAA places tight restrictions on the use and disclosure of protected health information, but there are many ways to “de-identify” it, freeing it from HIPAA’s constraints

Meaningful use mash-up: update on deadlines, changes for Stage 2, and the start of MU audits

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • October 2 2012

The march towards electronic health records (“EHRs”) and health information exchange continues

Health information security is no game...except when it is

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • September 19 2012

On Sept. 17, 2012, HHS announced its fourth HIPAA settlement of the year, reaching a resolution agreement with Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc. (collectively, “MEEI”) for $1.5 million and requiring a three-year corrective action plan with external monitoring

HIPAA news: the good, the bad, and the ugly

  • Davis Wright Tremaine LLP
  • -
  • USA
  • -
  • June 29 2012

The past week has brought no less than three significant HIPAA announcements: the publication of the audit protocol that is being used in the Office for Civil Rights’ (“OCR”) current privacy and security audits; the first HIPAA financial settlement with a state agency; and a further delay of the final HIPAA “omnibus” rules