The American Hospital Association, joined by a few others, has sued the federal government to enjoin them from enforcing their published Guidance on “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates.”
The Minnesota Supreme Court held that HIPAA “authorizes” disclosures for purposes of state law and consent was not required for a hospital to disclose PHI to its institutionally related foundation for fundraising purposes. Other states might take a similar stance. The Information Blocking Rule (IBR) prohibits health care providers from interfering with the access and exchange of EHI in an unreasonable manner. State with laws containing similar “as authorized by federal law” exceptions to consent must be carefully considered when claiming the IBR’s Privacy Exception to “block” EHI.
On December 1, 2022, OCR released a “guidance” Bulletin re: “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates.” From it, we learned (among other things) that OCR believes that an individual’s IP addresses and geo location, collected by a regulated entity’s website, is protected by HIPAA. Now, we have come to learn that HIPAA compliance investigations by OCR are already underway concerning this topic. Are you ready?
The New Year is finally here, and I believe that there will be a LOT going on in 2023! Here are just a few of the things that Legal HIE is looking to stay on top of for our readers this year . . .
A recent opinion article published in STAT News explored whether potential litigation is looming surrounding the de-identified data exception in HIPAA. The authors of the article point out that “large volumes of data underpin the development of any AI effort,” which is why companies…
BCBS Plans Defend against Antitrust Class Actions Back at the end of July, a class action lawsuit was filed against Blue Cross Blue Shield of Alabama (BCBS Alabama), the Blue Cross Blue Shield Association (the “Association”), and multiple BCBS Plans for antitrust violations. The...
The ACA SCOTUS Decision in Plain English As we all know from the “media drama” as some might call the countless media coverage, news articles, blogs and other posts, the Supreme Court of the United States (“SCOTUS”) upheld the Patient Protection and Affordable Care Act (“ACA”) on June...
Will HIPAA Conviction Appeal Loss Open the “Zhou” Gates? This post is prepared by Christopher Dodson. Readers of this blog are probably familiar with the case of Dr. Huping Zhou, who was successfully prosecuted for violating HIPAA’s privacy protections. Zhou accessed the patient records of...
State AG Brings First HIPAA Lawsuit Against Business Associate Last month, I posted how treatment of business associates during HIPAA investigations remains unclear as well as assignment of liability for breaches of PHI. A final “omnibus rule” is expected to clarify the HITECH business...
Yet Another Class-Action Filed After Breaches of Patient Data In what appears to be the trend in California for 2011, another class-action lawsuit has been filed, this time by patients of the University of California-Los Angeles (UCLA) Health System affected by a data breach in early...
Supreme Court to Hear Arguments on Suit for Damages under the Privacy Act The Supreme Court is scheduled to hear oral arguments tomorrow, November 30, in a suit for damages under the Privacy Act stemming from a wrongful disclosure of confidential information. Federal Aviation...
Doctor Faces Criminal Charges for Wrongful Disclosures under “False Pretenses” Tripping on the heels of the HIPAA criminal charges against Chelsea Catherine Stewart for theft of patient information, (see my previous post on June 14, 2011), a physician was indicted June 21, 2011 on three...
U.S. Supreme Court Strikes Down Vermont’s Prescription Drug Data Mining Ban Law Last Friday, the United States Supreme Court struck down the Vermont Prescription Confidentiality Law allowing prescriber-identifying information to be sold and disclosed by pharmacies and pharmaceutical...
Class Action Sought for Charleston Area Medical Center Breach Patients affected by a West Virginia hospital breach that went undetected for several months are seeking certification as a class action as reported by Health Data Management. Five of the approximately 3,655 affected...
The Antitrust Headache: What ACOs, AT&T and Blue Cross have in Common So what exactly do a nation-wide health insurer and the second (potentially now first) largest U.S. wireless provider have in common? Upcoming battles over the antitrust implications of their actions and a...