Recent Updates in Data Privacy & Security for Health Care Entities

The Department of Health and Human Services resolved three investigations and one matter relating to compliance with the HIPAA Privacy Rule. Two of the cases related to the Office of Civil Rights' ongoing Right of Access Initiative, which is aimed at supporting individuals' right to timely and cost-effective access to their health care records. Additionally, at the federal level, Congress introduced a bipartisan bill that would be aimed at protecting sensitive health care data. The bill was introduced in light of recently increased cybersecurity threats. The bill would require health care entities to undergo cybersecurity training, among other activities. Finally, at the state level, Utah has now become the fourth state to enact comprehensive data privacy legislation. Utah’s Consumer Privacy Act (UCPA) is not effective until December 31, 2023. However, health care entities will need to focus on meeting the Act’s requirements prior to this date. Read more from Quarles & Brady here.

This article was submitted by Madison Hartman, Quarles & Brady LLP. If you would like to submit content or write an article for the Health Care & Life Sciences Section, please email Kara Sikorski at ksikorski@indybar.org.

Subscribe to Health Care & Life Sciences Section news here!