10 Ways a Business Associate Can Trigger HIPAA Enforcement

The Department of Health and Human Services (“HHS”) may have signaled its interest in pursuing more enforcement actions against business associates. On May 24, 2019, the HHS Office for Civil Rights (“OCR”), released a&#160… Continue reading 10 Ways a Business Associate Can Trigger HIPAA Enforcement

Notable GDPR Enforcement Actions in the First Year and Key Takeaways

In the year since the General Data Protection Regulation (“GDPR”) went into effect on May 25, 2018, companies worldwide have been adapting to the new privacy rules—and EU regulators have also been busy adjusting to the new … Continue reading Notable GDPR Enforcement Actions in the First Year and Key Takeaways

Washington Strengthens Breach Notification Law

On May 7, 2019, Governor Jay Inslee signed a bill (HB 1071) that strengthens the state’s existing data breach notification law by expanding the definition of “personal information” and reducing the time an entity has to disclose… Continue reading Washington Strengthens Breach Notification Law

HHS Announces Reduced Annual Limits on Civil Money Penalties for Most HIPAA Violations

The Department of Health and Human Services (“HHS”) recently issued a Notification of Enforcement Discretion Regarding HIPAA Civil Money Penalties (“CMPs”) in which it lowered the maximum annual fines that can be asse… Continue reading HHS Announces Reduced Annual Limits on Civil Money Penalties for Most HIPAA Violations

CCPA Amendments Advance Out of Committees

While many companies are struggling to make sense of the California Consumer Privacy Act (“CCPA”) (see our prior posts here and here) and roll out their CCPA compliance programs, the California Assembly Privacy and Consumer Prote… Continue reading CCPA Amendments Advance Out of Committees

New EU Cookie Consent Recommendation from Advocate General

On March 21, 2019, Advocate General Maciej Szpunar (“Advocate General” or “AG”) of the Court of Justice of the European Union (“CJEU”) issued an opinion in which he recommended that the Court rule that pre-chec… Continue reading New EU Cookie Consent Recommendation from Advocate General