Posted In:
Business Transactions & Corporate Counseling, Cybersecurity & Data Privacy and Health Care
Industries:
Technology and Health Care
Compliance Checkup & Corporate TIPS: Fifth Circuit Shines a Light on HIPAA "Encryption" and "Disclosure" Rules in M.D. Anderson Decision
By Laura F. Fryan on May 11, 2021
Earlier this year, the Fifth Circuit Court of Appeals handed down a decision vacating a $4.3 million penalty imposed on University of Texas's MD Anderson Cancer Center by the U.S. Department of Human Services (HHS) for self-reported HIPAA violations, including violations of the Encryption and Disclosure Rules....
Posted In:
Cybersecurity & Data Privacy
Industry:
Technology
Corporate TIPS: Cyberattack on Microsoft Demonstrates Importance of Incident Response Plans
By Craig S. Horbus & Jarman J. Smith on April 28, 2021
Tens of thousands of Microsoft customers, including many based in the United States (U.S.), have fallen victim to a cyberattack orchestrated by a group of hackers from China. Businesses and government agencies in the U.S. that use Microsoft's email service were affected as the hackers launched an aggressive attack that initially began back in January of 2021....
Posted In:
Cybersecurity & Data Privacy
Industry:
Technology
Corporate TIPS: All-Time High GDPR Fines
By Craig S. Horbus & Jarman J. Smith on April 14, 2021
The European Union (EU) has begun taking an aggressive approach toward privacy law enforcement. Since the enactment of the General Data Privacy Regulation (GDPR) in 2018, the EU has fined companies over $330 million for breaching data protections regulations. As the number of data use violations continue to increase, we can expect the number of penalties and fines issued against non-compliant actors to continue to grow as well....
Posted In:
Business Transactions & Corporate Counseling, Coronavirus Resource Page, Cybersecurity & Data Privacy and Health Care
Industry:
Health Care
Corporate TIPS and Compliance Checkup: Privacy Law Concerns with Virus Vaccine Tracking
By Jarman J. Smith on March 31, 2021
Attorney Jarman Smith discusses current privacy law concerns as COVID-19 vaccines are introduced. With emerging efforts to monitor those who have been vaccinated, many companies in the U.S. are struggling to determine how to handle and retain such sensitive health information of their employees or even customers....
Posted In:
Cybersecurity & Data Privacy
Industry:
Technology
Corporate TIPS: GDPR Compliance - Why You May Need a Data Protection Officer
By Craig S. Horbus & Jarman J. Smith on March 17, 2021
Many U.S.-based companies affected by the GDPR are in the process of revamping their data-processing practices and policies to ensure compliance with the regulation's hefty list of requirements. One very important requirement on that list is the appointment of a DPO. You should take a closer look at the GDPR and your compliance project schedules to determine if your company may need a DPO....
