HIPAA Privacy Rule

Applying HIPAA to Digital Health

By Matt Fisher – The aim of the recent Getting Back to Basics post was to re-establish the key fundamentals of how HIPAA operates. To summarize in a sentence, HIPAA applies to certain defined entities working or interacting with healthcare information related to an individual.


Getting Back to Basics: A HIPAA Primer

By Matt Fisher – The constant discussions around the impact and operation of the regulations implementing the Health Insurance Portability and Accountability Act, or HIPAA (yes, there are 2 A’s and only 1 P) as it is more commonly referred to, have made it an interesting time to be a healthcare attorney and one focused a lot on the operation of HIPAA.


Inadvertent Exposure

By Art Gross – You know that your data is valuable. It might not be in the obvious way, and you might be unaware that it is the collective data that provides hackers with more power over you. Proposed changes to the HIPAA Privacy Rule might lead to an inadvertent way of exposing that patient data.




More Time for Comments

By Art Gross – Last week, the Office for Civil Rights at the US Department of Health and Human Services announced that there would be a 45-day extension of the comment period for the public with regard to the Notice of Proposed Rulemaking on modifying the HIPAA Privacy Rule that was originally posted in December of 2020.



Potential Changes Ahead

By Art Gross – The Health and Human Services Office for Civil Rights has proposed changes to the HIPAA Privacy Rule that could be substantial. The Notice of Proposed Rulemaking (NPRM) proposal stated it was to “remove barriers to, coordinated care and individual engagement” and was issued recently.