Benefits - HIPAA

On May 18, 2026, the U.S. Department of Health and Human Services (HHS) announced the restructuring of its Office for Civil Rights (OCR) enforcement efforts, establishing a dedicated unit for privacy and security enforcement under the Health Insurance Portability and Accountability Act (HIPAA). The

HIPAA compliance requirements continue to evolve, and recent court decisions have understandably drawn significant attention. Last summer, we examined these developments in our Workplace Privacy Report article, analyzing how a Texas federal district court decision affected the HIPAA Reproductive Hea

Businesses across many industries naturally want to showcase their satisfied customers. Whether it's a university featuring successful graduates, a

Entities regulated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), including employer-sponsored health plans, have until February 16, 2026, to comply with additional privacy protections for patient records related to substance use disorder. A separate permission is requir

Explained in more detail below, under the recent vacatur of most of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (the “Reproductive

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) was enacted to protect the privacy and security of individuals’ medical information. It sets standards for how healthcare providers, insurers, and other entities handle personal health information (“PHI”), ensuring that such d

TakeawaysMultiple state laws are strengthening protections for health data, increasingly going beyond HIPAA, healthcare providers and health plans.Certain categories of health information, such as reproductive health, have greater privacy protections.Organizations cannot look solely to HIPAA when as

In the first five months of 2025, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced it had entered into ten Health Insurance Portability and Accountability Act (HIPAA) resolution agreements reflecting the settlement of alleged HIPAA violations stemming f

On January 6, 2025, the US Department of Health and Human Services Office for Civil Rights (“OCR”) issued a notice of proposed rulemaking (“Proposed Rule”) containing significant updates to the Security Rule under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

As the healthcare sector continues to be a top target for cyber criminals, the Office for Civil Rights (OCR) issued proposed updates to the HIPAA Security

A healthcare provider delivering pain management services in Florida and other states faces a $1.19 million civil monetary penalty from the U.S.

Employers will soon see the national debate about abortion popping up in some unexpected places: the HIPAA privacy policies and procedures and notices of privacy practices they use for their health benefit plans.

On February 14, 2024, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a new, final version of their guidance for regulated healthcare entities to follow to improve cybersecurity and complianc

Many states have enacted or revived statutes limiting or barring access to abortion in the wake of the Supreme Court of the United States’ ruling in Dobbs v. Jackson Women’s Health Organization and further legislative or regulatory initiatives on this subject are likely.

At Nexsen Pruet, we work with clients across the full spectrum of healthcare to manage compliance with HIPAA, and often we receive questions about associates and business associate contracts.

Health Care attorney Shannon Lipham breaks down HIPAA privacy rule as she discusses managing business associates and business associate agreements while staying HIPAA compliant.

Since the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule became effective in 2003, it generally required covered entities to provide patients timely access to their medical records. Of course, state health laws also have provided similar rights to patients regarding

There is no private cause of action to address an improper disclosure of medical information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the U.S. Court of Appeals for the Fourth Circuit has held for the first time. Payne v. Taslimi , No. 18-7030, 2021 U.S. App. LEX