Covered entities beware: a timing pitfall lurks within the recently adopted rules prohibiting information blocking. We have posted about OCR’s “Right to Access Initiative” and numerous enforcement actions taken to
Continue Reading Re-Setting the Clock for Responding to Individual Access Requests Under the Information Blocking Rule
Elizabeth G. Litten
Which Privacy Protections Apply? HIPAA, FERPA and COVID-19
By Elizabeth G. Litten on
A recent conversation with a colleague in California prompted me to write this. He said that as part of its back-to-school plan, his children’s elementary school district “highly encouraged” that…
Continue Reading Which Privacy Protections Apply? HIPAA, FERPA and COVID-19
New OCR Resource Adds Guidance on HIPAA and Direct-to-Consumer Health Apps
By Elizabeth G. Litten on
A tricky issue for mobile health app developers since the Office for Civil Rights (OCR) released its first “Health App Use Scenarios & HIPAA” guidance back in 2016 has been…
Continue Reading New OCR Resource Adds Guidance on HIPAA and Direct-to-Consumer Health Apps
Updated OCR Guidance on Contacting Recovered COVID-19 Patients
By Elizabeth G. Litten on
The Office for Civil Rights within the Department of Health and Human Services (OCR) provided guidance in June that reassured covered entity health care providers and that it is generally…
Continue Reading Updated OCR Guidance on Contacting Recovered COVID-19 Patients
“I Have an App for That”: ONC’s Information Blocking Rule and HIPAA Access Rights
By Elizabeth G. Litten on
A patient asks her doctor to send her test results to an app the patient has downloaded on her phone. The doctor worries that the app is not secure and…
Continue Reading “I Have an App for That”: ONC’s Information Blocking Rule and HIPAA Access Rights
Employer Collection of COVID-19 Data and Employee Privacy
By Elizabeth G. Litten on
The following post is adapted from an article written by Fox Rothschild attorneys Wayne Pinksone and Lucy Li, available here.
OSHA recently published guidance for “nonessential businesses” that are…
Continue Reading Employer Collection of COVID-19 Data and Employee Privacy
Don’t Get Sprayed: CISA Alert Reminds Health Care Entities to Use Strong Passwords
By Elizabeth G. Litten on
A joint Alert from the U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) and the U.K.’s National Cyber Security Centre (NCSC) warns of new cyber attacks targeting…
Continue Reading Don’t Get Sprayed: CISA Alert Reminds Health Care Entities to Use Strong Passwords
OCR Webinar on HIPAA and COVID-19: Key Points for Covered Entities and Business Associates
By Elizabeth G. Litten on
Fox Rothschild LLP partner Beth Larkin listened to the HHS Office for Civil Rights 4/24/20 webinar (which should be posted on its website at some point) regarding HIPAA and COVID-19…
Continue Reading OCR Webinar on HIPAA and COVID-19: Key Points for Covered Entities and Business Associates
Dos and Don’ts from OCR’s Guidance and FAQs on Telehealth and HIPAA
By Elizabeth G. Litten on
On March 20, 2020, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) published Guidance and a list of FAQs related to the provision of telehealth…
Continue Reading Dos and Don’ts from OCR’s Guidance and FAQs on Telehealth and HIPAA
COVID-19 Update: Limited Waiver of HIPAA Sanctions and Penalties for Certain Hospitals
By Elizabeth G. Litten on
Effective March 15, 2020, certain hospitals that fail to comply with specific HIPAA Privacy Rule requirements will not be subject to HIPAA sanctions and penalties, according to a “COVID-19 …
Continue Reading COVID-19 Update: Limited Waiver of HIPAA Sanctions and Penalties for Certain Hospitals