OCR Crackdown: Ransomware Settlement Exposes Data Security Risks and Reporting Failures

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR) has recently announced its first settlement agreement related to a ransomware attack. Interestingly, it was not the ransomware incident itself which spurred OCR’s enforcement action. Instead, the trigger likely came from the regulated entity’s failure to detect and subsequently report the breach…

Read More

New York City Adopts Height and Weight Anti-Discrimination Law in Employment

New York City stands at the forefront of workplace anti-discrimination initiatives as it enacts novel protections against height and weight bias. This legislative development places the city amongst a select group of American jurisdictions that have adopted such protective measures – a visionary action heralding consequential change. The new law, slated to come into effect…

Read More

Navigating DOJ’s Immigration-Employment Program: Mitigating Risks and Opportunities for Companies

Two recent developments involving the U.S. Department of Justice’s Civil Rights Division (DOJ) underscore a series of potential risks and opportunities that lie ahead for companies navigating through immigration-related employment matters. This comes into sharper focus in the backdrop of the DOJ’s immigration-employment program facing a challenging environment amidst an important settlement scenario. The news…

Read More

K-12 Title IX Decision-Maker Training Program Aims to Keep Legal Professionals Updated on Education Regulations

As legal professionals, it is important to stay updated with the current regulations and legal statutes in order to provide the most comprehensive service to clients. With the significant legislative changes happening throughout the world, one such important regulation that legal professionals, especially in the education sector, must be aware of are the K-12 Title…

Read More

Southwest Behavioral Health Center Reports Data Breach Affecting Over 17,000 Individuals

Southwest Behavioral Health Center (SBHC), on November 13, 2023, submitted a data breach notice to the U.S. Department of Health and Human Services Office for Civil Rights (OCR). This stems from a discovery that confidential information entrusted to the institution was subject to unauthorized scrutiny. According to the submission, the breach was large enough to…

Read More

Healthcare Industry on Alert: Mt. Graham Medical Center Faces Ransomware Attack and Data Breach Consequences

Recent developments have shown an increase in cyber threats to industries across the board, and the healthcare industry is not immune. The case in point, the Mt. Graham Regional Medical Center (“MGRMC”), which fell prey to a ransomware attack and confirmed a data breach. The incident culminated on September 29, 2023, as MGRMC filed a…

Read More

Healix Infusion Therapy Data Breach Underscores Cybersecurity Risks for Healthcare Providers

Healix Infusion Therapy, a prominent provider of ambulatory infusion services, has reportedly filed a notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights (HHS-OCR). This action took place on November 9, 2023, following the company’s discovery that an unauthorized entity had succeeded in accessing its confidential…

Read More

PeakMed Colorado Reveals Data Breach Affecting Over 27,000 Patients: Details and Implications

PeakMed Colorado, LLC, a leading healthcare service provider, disclosed a significant data breach impacting over 27,000 of its patients. The company filed a notice of the incident with the U.S. Department of Health and Human Services Office for Civil Rights on October 27, 2023, after detecting that an unauthorized party had accessed an employee’s login…

Read More

Coinbase’s Legal Pursuit Against SEC Could Catalyze More Rulemaking Petitions

Coinbase Global Inc.’s pursuit of legal action against securities regulators for their implied stalling on the company’s crypto rulemaking request is not being overlooked by other corporations and advocacy groups. Coinbase has taken their plea to an appeals court, lodging a request for the Securities and Exchange Commission (SEC) to respond to a submission for…

Read More

Westat Data Breach: Healthcare Providers Face Cybersecurity Challenges Amid Unauthorized Information Access

Westat, Inc., a renowned research organization, recently reported a significant data breach, affecting numerous healthcare providers, including Henry Ford Health. This disclosure follows the filing of two data breach notices by Westat with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) in October and November of 2023. The unfortunate intrusion…

Read More

OCR Reasserts Title VI Guidelines amid Rising Hate Crimes and Harassment in Education Sector

On November 7, 2023, the Department of Education’s Office for Civil Rights (OCR) unveiled its Dear Colleague Letter (DCL). This missive aims to remind schools about their responsibilities under Title VI in assuring a discrimination-free learning environment for students. DCL’s release occurs against the backdrop of a nationwide increase in reported hate crimes and harassment….

Read More

FAMS Discloses Data Breach Impacting 164,796 Individuals: Implications for Financial Management

Financial Asset Management Systems, Inc., also known as FAMS, recently disclosed a significant data breach, which has reportedly reached about 164,796 individuals. This breach, as declared by the company on November 4, 2023, has far-reaching potential impacts with the unauthorized party gaining access to a plethora of sensitive consumer data. According to the notice filed…

Read More

OCR Guidance Addresses Telehealth Privacy and Security Concerns for Legal Professionals

In a recent development, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has released two in-depth documents. Intended to educate healthcare providers, these resources focus primarily on the privacy and security risks associated with telehealth, a medium witnessing unprecedented growth amidst global health crises. The OCR’s initiative is significant, considering…

Read More

US Department of Education Addresses Antisemitism and Islamophobia on College Campuses

In light of the recent Israeli/Palestinian conflict, the Department of Education (DOE) in the United States has issued a notice to universities and colleges across the country encouraging vigilance against ancestral and ethnic discrimination on campuses. The outreach comes in response to observed instances of antisemitism and Islamophobia within postsecondary and K-12 educational spaces. As…

Read More

Pharmacy Group of Mississippi Data Breach Exposes Personal Information for Over 13,000 Individuals

On November 7, 2023, Pharmacy Group of Mississippi, LLC reported a data breach to the U.S. Department of Health and Human Services Office for Civil Rights. It revealed that an unauthorized party gained access to sensitive consumer information trusted to the company, detailed in a notice of data breach filed by Pharmacy Partners. Despite disclosure…

Read More

Fostering Inclusivity and Tolerance: The Department of Education’s Call for Upholding Civil Rights on Campus

In the wake of soaring tensions and rising hate crimes occurring on university campuses countrywide, the Department of Education recently reminded educational institutions receiving federal funding of their essential role in fostering inclusivity and tolerance. Increasing threats to specific ethnic and religious groups such as Jewish, Israeli, Muslim, Arab, and Palestinian students have necessitated a…

Read More

Hospital Tracking Pixels: A Privacy Law Debate in the Midst of Healthcare and Technology Advancements

In November 2023, the world of privacy law and corporate legal governance witnessed some interesting developments. We focus on two main areas below: the controversy surrounding online tracking pixels on hospital websites and the American Hospital Association’s response to Senator Bill Cassidy’s request for information on the lasting implications of this matter. An online tracking…

Read More