Search
October was National Cybersecurity Month. As part of its ongoing focus on HIPAA Security Rule awareness and compliance, the Office for Civil Rights (“OCR”) within the Department of Health and Human Services (“HHS”), published its HIPAA Security Rule Incident Procedures newsletter (the “Newsletter”)...
Evolution of Cyber Insurance and the Impact on Cyber and Privacy Risk Management Laurie Kamaiko will speak at the Privacy + Security Forum 2022. Her panel is entitled "Evolution of Cyber Insurance and The Impact on Cyber and Privacy Risk Management." More details to come.
The close of California’s legislative session on August 31 without amending the California Consumer Privacy Act (“CCPA”) means that CCPA will soon apply to personal information that many businesses process concerning their employees, contractors, and applicants. CCPA had been amended in November of...
A spate of lawsuits across the country has targeted companies that use website tracking and analytics tools, claiming they are violating prohibitions against illegal wiretaps. In a recent precedential decision, the Third Circuit weighed in on this issue, suggesting that companies can indeed be...
The California Attorney General began exercising enforcement authority under the CCPA on January 1, 2020. Among the CCPA’s enumerated rights for consumers, the cornerstone of the CCPA, is the right to opt out of the collection of personal information. In Sephora’s case, the Attorney General...
The Twitter whistleblower's complaint is unlikely to be the silver bullet Elon Musk may be hoping for — but it could convince Twitter to let him pay to walk away Twitter is likely to downplay Zatko's allegations and attempt to keep him out of the case altogether, Nancy DePodesta, a partner in the...
On July 15, 2022, the Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS) announced the resolution of eleven investigations as part of its Health Insurance Portability and Accountability Act (HIPAA) Right of Access Initiative (the "Initiative"). OCR created...
No ‘slam dunk fix’ in HIPAA privacy law to protect abortion patients The Biden administration wants to lean on the decades-old privacy law to protect abortion patients. What could it actually do? “Typically, the laws are trying to catch up with where the real world is, in terms of what’s going on...
On June 29, 2022, the U.S. Department of Health and Human Services Office for Civil Rights released two guidance documents addressing (1) disclosures under the HIPAA Privacy Rule relating to reproductive health care (“Disclosure Guidance”), and (2) the privacy and security of reproductive health...
To Correct, or to Let Stand? When high-profile figures lie about their academic records, the institutions they attended must perform a delicate balancing act between protecting their privacy and telling the truth. by Liam Knox “The hands of the institution are tied in a lot of ways from getting...
Laurie Kamaiko, chair of the Firm's Cyber Insurance Practice, participated in a panel discussion during the NetDiligence Cyber Risk Summit in Philadelphia, Pennsylvania. The panel covered the following topics: Infrastructure and infrastructure-adjacent vulnerabilities Service provider outlook at...
Patrick Hromisin (Counsel, Saul Ewing’s Cybersecurity and Privacy Group in the Philadelphia office), Aaron Skrypski (Vice President & Assistant General Counsel, Privacy and Technology, Aramark), and Andy Abrams (Director of Digital Systems, Integration and Information Technology, United Way...