Category Archives: Federal

ANNOUNCE: HHS’ Office for Civil Rights Seeks Public Comment on Recognized Security Practices and Sharing Civil Money Penalties and Monetary Settlements Under the HITECH Act

Posted on by

The U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) today released a Request for Information (RFI) seeking input from the public on two requirements of the Health Information Technology for Economic and Clinical Health… Continue reading ANNOUNCE: HHS’ Office for Civil Rights Seeks Public Comment on Recognized Security Practices and Sharing Civil Money Penalties and Monetary Settlements Under the HITECH Act→

President Biden Signs Critical Infrastructure Ransomware Payment and Cyber Incident Reporting into Law

Posted on by

Ashden Fein, Robert Huffman, Moriah Daugherty, and Hensey A. Fenton III of Covington and Burling write: On March 15, 2022, President Biden signed the Consolidated Appropriations Act 2022, a $1.5 trillion omnibus spending package to fund the government … Continue reading President Biden Signs Critical Infrastructure Ransomware Payment and Cyber Incident Reporting into Law→

Hidden privacy lessons in the FTC’s CafePress security enforcement

Posted on by

Cobun Zweifel-Keegan writes: In its most recent cybersecurity enforcement decision, the U.S. Federal Trade Commission announced a draft settlement agreement with the current and former operators of the customized merchandise website CafePress.com. Alth… Continue reading Hidden privacy lessons in the FTC’s CafePress security enforcement→

Comprehensive Health Services Pays False Claims Act Settlement Involving EMR Security

Posted on by

Marianne Kolbasuk McGee reports: A healthcare services contractor has agreed to pay a $933,000 settlement in a federal whistleblower case involving alleged false claims by the entity about the security of electronic medical records containing the infor… Continue reading Comprehensive Health Services Pays False Claims Act Settlement Involving EMR Security→

SEC Proposes Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies

Posted on by

Washington D.C., March 9, 2022 — The Securities and Exchange Commission today proposed amendments to its rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public compan… Continue reading SEC Proposes Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies→

U.S. Congress Passes Cyber Incident and Ransom Payment Reporting Requirement

Posted on by

Energy, financial services, food and agriculture, healthcare, information technology, defense industrial base, and other critical infrastructure entities in the United States will face new cyber incident reporting requirements as a result of the Cyber … Continue reading U.S. Congress Passes Cyber Incident and Ransom Payment Reporting Requirement→