On April 22, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights announced a final rule, entitled the HIPAA Privacy Rule to Support Reproductive Health Care Privacy. The rule strengthens privacy protections for medical records and health information for individuals who are seeking, obtaining, providing, or facilitating lawful reproductive health care. Health…
Author: Dissent
HHS Office for Civil Rights Imposes a $548,265 Penalty Against Children’s Hospital Colorado
Not all monetary penalties are for breaches affecting large numbers of patients. In this case, HHS imposed a penalty on an entity that had breaches in both 2017 and 2020. PogoWasRight notes that the 2017 incident affected 3,370 patients, and the 2020 incident affected 2,553 patients — as reported to HHS at the time. Today,…
Mount Nittany Health agrees to pay $1.8M to settle privacy lawsuit
WJAC reports that Mount Nittany Health is agreeing to pay $1.8 million in a proposed settlement in a lawsuit over the use of tracking software. As part of the lawsuit, the plaintiffs claimed that Mount Nittany Health never notified patients of the data sharing, even after other entities began notifying patients of the tracking pixels…
Vietnam National Assembly Approves Law on Personal Data Protection
Vietnam Briefing reports: On November 30, 2024, the Vietnam government approved the new Law on Personal Data Protection with a 94.15 percent majority. The law’s implementation date has been expedited to July 1, 2025, from the initially planned January 1, 2026. This legislation introduces stricter provisions than the existing Personal Data Protection Decree, aiming to establish…