PrivacySignal
← Front page

Search & browse the archive

The full corpus — beyond today's front page.

Reset

196 results · page 1 of 9

Healthcare
HIPAA Journal · · US Federal

Healthcare Providers Discover Unauthorized PHI Disclosures to AI Tools

At least two healthcare providers have reported data privacy incidents in which patient health information was uploaded to AI tools without authorization. The disclosures were announced separately and involve protected health information shared outside approved channels.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai#privacy Read original →
Healthcare
C CBC · · International

Critics warn of health data privacy concerns as Ottawa ramps up AI strategy

Canada's federal government is advancing its artificial intelligence strategy, and critics are raising concerns about how health data may be collected, used, or shared in that process.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai#privacy Read original →
Healthcare
The Guardian — Tech · · International

British people don’t trust Palantir – it’s not too late to reverse the NHS’s dependence on it | Ben Coleman

A Labour MP and health committee member is calling on UK ministers to let Palantir's £330 million NHS data platform contract expire next March rather than renew it, arguing the NHS should not remain dependent on a US tech company for control of patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
The Record · · International

Medical services company settles with 4 states over 2023 hack of sensitive patient records

Perry Johnson Companies, a Nevada-based medical services firm, has reached a settlement with attorneys general in Connecticut, New Jersey, New York, and Michigan over a 2023 breach that exposed sensitive patient records held by its medical transcription, coding, and imaging subsidiaries.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Security Incident at EHR Vendor Affects Patients of New York Counselling Practices

A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation

A federal judge has certified plaintiff classes in consolidated litigation against Meta over allegations that the company collected health-related data through its tracking tools embedded on healthcare websites. Class certification is a significant procedural step that allows the case to proceed on behalf of a large group of affected individuals.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
Nextgov/FCW · · US Federal

VA, DOD are now live on national health data sharing superhighway

The Department of Veterans Affairs and Department of Defense have joined a national health data sharing network that already includes the Social Security Administration, Indian Health Service, and Consumer Product Safety Commission. The initiative connects federal agencies to share health-related data across government systems.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
M Medical Xpress · · International

Health data privacy protections must extend beyond individuals, microbiome researchers argue

Microbiome researchers are calling for health data privacy frameworks to go beyond protecting individual patients, arguing that biological data from one person can reveal sensitive information about family members, communities, or populations who never consented to share anything.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

HIPAA Certification for Medical Couriers

A HIPAA Journal post explains that HIPAA certification for medical couriers is a privately issued training certificate confirming a driver has completed relevant compliance training, not an official government credential.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Senate Bill Seeks to Expand Use of AI Technologies in Healthcare and Reimburse for Adoption

A Senate discussion draft proposes expanding the use of AI in healthcare and creating reimbursement pathways for providers who adopt these technologies. The draft is seeking feedback from clinicians, industry stakeholders, and policy experts before advancing further.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai Read original →
Healthcare
HIPAA Journal · · US Federal

Data Breaches Announced by HCA Healthcare; Blossom Health

Four healthcare organizations — HCA Healthcare, Blossom Health, El Camino Health, and University of Mississippi Medical Center — have each disclosed data breaches. The incidents were reported in coverage by The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

University Hospitals Working on Restoring Systems After Cyberattack

University Hospitals disclosed a cyberattack that struck on October 22 and is working to restore affected systems. The incident is one of several recent cybersecurity events reported in healthcare, with EyeMed also announcing a breach.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

41,000 Connecticut Medicaid Recipients Affected by DHS Data Incident

Connecticut's Department of Social Services disclosed a data incident affecting roughly 41,000 Medicaid recipients, part of a wave of breach announcements that also involved Public Partnerships LLC, Hattiesburg Eye Clinic, and at least one other organization.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
The Guardian — Tech · · International

Palantir AI tech unused or little used by 29 NHS trusts said to be benefiting from it

An investigation by the Guardian found that 29 NHS hospital trusts publicly listed by NHS England as benefiting from Palantir's £330 million medical data platform are either not using it at all or using very little of it. A senior health official described the gap between the NHS's public claims and the trusts' own accounts as 'very misleading.'

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai Read original →
Healthcare
DataBreaches.net · · International

A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat

A RIZAP Inc. employee in Japan uploaded health records belonging to 726 people into an unauthorized personal generative AI account while pulling data from the company's health-guidance management system. The incident involved records the company holds on behalf of insurers.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · AI governance · Policy

#healthcare#regulation#ai Read original →
Healthcare
T The National Law Review · · International

HINDSIGHT IS ALWAYS 20/20: Fifth Circuit Reverses Dismissal of Data Privacy Claims Based On Individually Identifiable Health Information

The Fifth Circuit Court of Appeals reversed a lower court's dismissal of data privacy claims involving individually identifiable health information, reviving the case and signaling that such claims can survive early court challenges.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

More Than One-Fourth of Healthcare Websites Fail Core Privacy Tests

A Datatrue study of heavily visited U.S. healthcare websites found that more than one in four fail basic privacy standards, with a broader finding that more than four in ten websites across categories share similar shortcomings.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

Vendor Incident Affects 341,000 Blueberry Pediatrics Patients

Blueberry Pediatrics, a telemedicine service for families seeking access to board-certified pediatricians, has disclosed a data security incident originating at a third-party vendor that affected approximately 341,000 patients.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

HHS Delegates Permissive Exclusion Authority to CMS

The Department of Health and Human Services has delegated permissive exclusion authority to the Centers for Medicare and Medicaid Services, shifting some enforcement power over who can participate in federal healthcare programs from the OIG to CMS.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
EDPS · · EU

EDPS Newsletter 123 out now

The European Data Protection Supervisor has published its 123rd newsletter, covering topics including the human role in cyberattacks, AI Act transparency requirements in EU institutions, cross-border health data recommendations, and a passenger data agreement between the EU and South Korea.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · AI governance · Administrators · General readers · Policy

#healthcare#gdpr#ai-governance#ai Read original →
Healthcare
Nextgov/FCW · · US Federal

VA completes 2026 EHR system deployments with final two site go-lives

The Department of Veterans Affairs has completed its 2026 Electronic Health Record system rollouts, with new Oracle Health deployments at facilities in Ohio and Alaska bringing the year's total to 13 medical facilities transitioned to the new platform.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Page 1 of 9 Next →