article thumbnail

Developments in Health Privacy and Cybersecurity Policy and Regulation: OCR Issues Cybersecurity Warnings and New Health Data Legislation Is Introduced

Data Matters

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

article thumbnail

HHS Issues Proposed Rule Modernizing HIPAA Privacy Rule

Data Matters

HHS stated that the Proposed Rule is intended to reduce burdens that may limit or discourage care coordination and case management communications among individuals and HIPAA-covered entities while continuing to protect the privacy of individuals. Notice of Privacy Practices Changes. Identity Verification.

Privacy 68
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Connecticut AG Announces Agreement with MetLife over 2009 Breach Incident

Hunton Privacy

On January 24, 2011, Connecticut Attorney General George Jepsen and Consumer Protection Commissioner William Rubenstein announced that they had reached an Assurance of Voluntary Compliance (“AVC”) with Metropolitan Life Insurance Co.

article thumbnail

U.S. Department of Health and Human Services Expands Its Health Information Privacy Enforcement Team

Hunton Privacy

In a move that portends increased enforcement of the Health Insurance Portability and Accountability Act (“HIPAA”) Privacy Rule, the Department of Health and Human Services (“HHS”) has created two new positions on its health information privacy enforcement team.

Privacy 40
article thumbnail

Nationwide Agrees to Pay $5.5 Million to Settle Multistate Data Breach Investigation

Hunton Privacy

On August 9, 2017, Nationwide Mutual Insurance Co. In October 2012, Nationwide and its affiliate, Allied Property & Casualty Insurance Co. According to the attorneys general, Nationwide and Allied had failed to deploy a critical software patch that was released in 2009 to address the vulnerability. million individuals. .

article thumbnail

HHS Announces 1.7 Million Dollar Settlement with WellPoint for Potential HIPAA Privacy and Security Rule Violations

Hunton Privacy

The WellPoint settlement relates to an Internet-based application database that was not properly secured, resulting in the online exposure of health insurance applicants’ electronic protected health information (“ePHI”), including names, addresses and Social Security numbers, for a period of six months from October 2009 to March 2010.

Privacy 40
article thumbnail

HHS Issues Final Omnibus Rule Modifying HIPAA Privacy, Security, Enforcement and Breach Notification Rules

Hunton Privacy

The Final Rule comes two and a half years after the proposed rule was published in July 2010.

Privacy 40