Some public figures have claimed that asking someone's vaccination status is a HIPAA violation. But HIPAA, a healthcare privacy law, only applies to medical professionals and entities. That means ...

Hospital cyber crackdown explained details HHS' proposed HIPAA Security Rule updates, including mandatory encryption and 72-hour system restoration.

The U.S. Department of Health and Human Services, the Equal Employment Opportunities Commission, the National Law Review, and Park Legal LLC. It’s now been 25 years since Congress passed HIPAA, the ...

HIPAA enforcement is tightening, with OCR ramping up audits and investigations that focus heavily on ransomware preparedness, risk analysis, and business associate oversight. Covered entities and ...

The 2026 HIPAA Security Rule updates will make encryption of all electronic protected health information (ePHI) at rest and in transit mandatory, ending the long-standing 'addressable' flexibility.