HIPAA

The U.S. Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) recently issued a report entitled “Electronic Medical Records in Healthcare” that discussed security risks applicable to electronic medical records (EMRs) and electronic health records (EHRs). EHRs and EMRs are prime targets for cyber attackers because protected health information (PHI)

We don’t often cover brand-new proposed legislation on Rivkin Rounds, generally preferring to wait until it’s closer to becoming law. However, two bipartisan bills introduced in Congress last week are worthy of mention.

The Telehealth Extension and Evaluation Act would allow the Centers for Medicare & Medicaid Services to extend certain pandemic-era flexibilities in Medicare

Eric Fader was featured on the LexBlog podcast, “This Week in Legal Blogging,” where he discussed his blog, Rivkin Rounds. The LexBlog article, “Eric Fader on his push to launch Rivkin Rounds and how it has paid off for him and his firm,” gives a brief overview of the topics the podcast goes into,

The New Jersey Attorney General’s Office and Division of Consumer Affairs recently announced that two New Jersey-based printing companies, Command Marketing Innovations, LLC (CMI) and Strategic Content Imaging, LLC (SCI), agreed, pursuant to a Consent Order, to pay $130,000 in fines and penalties to settle allegations that they violated the state’s Consumer Fraud Act

An article in the December issue of HIPAA Regulatory Alert, “HIPAA Changes Coming in 2022 Might Require Policy Revisions,” discussed how proposed changes to HIPAA and the HITECH Act may affect covered entities and business associates. Rivkin Radler’s Eric Fader was quoted in the article.

Eric pointed out that the proposed changes

On Thursday, November 18, in the next installment of Rivkin Radler’s Healthcare Compliance Lunch & Learn series, Rivkin Radler Partner Eric D. Fader will present an overview of changes in the provision of telehealth services, and federal and state regulation of them, since the beginning of the COVID-19 pandemic.  New rules and waivers that are

The New Jersey Attorney General’s Office announced on October 12 that Diamond Institute for Infertility and Menopause, LLC, based in Millburn, NJ, will pay a $495,000 penalty for allegedly violating HIPAA and state law by failing to implement appropriate cybersecurity measures. The New Jersey Department of Law & Public Safety’s Division of Consumer Affairs investigated

On September 30, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced that it issued guidance to clarify that the HIPAA Privacy Rule does not prohibit businesses from asking customers, clients or employees to disclose their COVID-19 vaccination status. OCR felt compelled to weigh in after chronic widespread ignorance of

The Federal Trade Commission (FTC) recently issued a policy statement confirming that vendors of apps and other connected devices that collect personal health information, such as glucose levels, heart rate, or fertility or sleep data, are subject to the FTC’s Health Breach Notification Rule. The rule, issued in 2009, requires vendors to notify consumers