The full corpus — beyond today's front page.
78 results · page 1 of 4
Sunshine Health, a Florida-based Medicaid and health insurance agency, has reported a data breach involving the theft of protected health information following a vishing attack. Health Payment Systems has also disclosed a separate breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Federal agencies have quietly joined the governing council of TEFCA, a national health data exchange network that connects thousands of hospitals, clinics, and other medical providers. The move gives federal agencies a formal role in a system designed to move health records digitally across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Electronic Frontier Foundation has filed a public comment with Meta's Oversight Board challenging the company's removal of posts about prescription medication, abortion care, and personal medical experiences on Instagram and other Meta platforms.
Who should care: Healthcare professionals · Privacy officers · Compliance
Loma Linda University Health and UCLA Health have both disclosed data security incidents. Details of the scope, affected individuals, and nature of the breaches have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five healthcare providers have reached settlements in class action lawsuits tied to their use of website tracking pixels, part of a broader wave of similar legal actions against the healthcare sector over the past 18 months.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
The Senate HELP Committee has advanced the Health Information Privacy Reform Act, a bill introduced last year aimed at extending privacy protections to health data that currently falls outside HIPAA's coverage.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Two hospital systems, Merit Health Central Hospital and NorthShore University Health System, have reached settlement agreements with HHS Office of Inspector General over violations of EMTALA, the federal law requiring hospitals to provide emergency care regardless of a patient's ability to pay.
Who should care: Healthcare professionals · Privacy officers · Compliance
A U.S. Senate committee has moved a health data privacy bill forward, advancing legislation aimed at strengthening protections for personal health information. The bill now heads to the broader Senate for further consideration.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The U.S. Consumer Product Safety Commission is seeking digital patient data from hospital emergency rooms, reportedly to support its product safety mission. The request has drawn privacy scrutiny over how sensitive medical records would be collected, used, and protected under existing health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Nina Capital has made an investment in Woodway Assurance, a company building a health data privacy platform, with the funding aimed at expanding the platform's reach and capabilities. Financial terms were not disclosed.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
A senior NHS clinician and policy expert argues that consolidation in the market for GP patient record systems — illustrated by the TPG/Optum UK deal — represents a structural problem, not just a one-off risk. The letter calls for genuine market competition as the safest way to prevent any single company from holding systemic leverage over sensitive patient data.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HIPAA Journal is prompting healthcare organizations to evaluate their readiness for security incidents by conducting formal risk assessments that identify threats to protected health information and gauge the likelihood those threats materialize.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The HIPAA Journal has published a checklist guide covering how organizations should conduct security risk assessments under HIPAA, including identifying threats to protected health information and evaluating how likely those threats are to occur.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The HIPAA Journal is offering a free security risk assessment resource aimed at helping covered entities and business associates evaluate threats to protected health information. The tool is designed to walk organizations through identifying risks, estimating likelihood, and addressing gaps in their HIPAA security posture.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
CareCloud, a New Jersey-based health technology company that provides electronic health records and related clinical services, has notified more than 345,000 patients that their data was stolen in a cyberattack. The company offers cloud-based and AI-assisted tools used by healthcare providers across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
A compliance roundup covering the week of July 27 to August 1, 2026 addresses three intersecting regulatory areas: the EU AI Act, health data privacy, and employment law reform in the United Kingdom.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy
Health-ISAC has issued a warning to healthcare organizations about a rise in successful data theft attacks attributed to the ShinyHunters threat group. The advisory signals that the group is actively targeting the health sector and making meaningful progress against its defenses.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Electronic Frontier Foundation reviewed how fitness tracker companies handle the sensitive health data collected by wearables like watches, bands, and rings. Their findings indicate that despite widespread adoption of these devices, manufacturers are doing far less than they could to protect users' data from outside access.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Banner Health and LifeStance Health Group have each agreed to settle lawsuits stemming from their use of tracking pixels and similar technologies on their websites. The tools allegedly collected and shared patient data with third parties without proper authorization under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
The HIPAA Journal has published an explainer on HIPAA audit checklists, describing them as structured tools that covered entities and business associates can use to assess their compliance with federal health privacy standards.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A House committee has advanced legislation that would block OSHA from finalizing or enforcing a federal heat safety standard for workers. The bill targets a rulemaking effort the agency has been developing to protect employees from heat-related illness on the job.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Department of Health and Human Services has added seven new industry pledges to its ongoing health technology initiative, which the Trump administration says has expanded app-based access to personal medical records to roughly 60% of Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HIPAA Journal has published a practical guide outlining how organizations can work toward HIPAA compliance, centering on the Department of Health and Human Services' seven-element compliance framework as a structured starting point following a risk assessment.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A Government Accountability Office report found that federal cyber incident reporting requirements for critical infrastructure operators may overlap across agencies, creating redundant obligations. The findings come as CISA prepares to finalize its rule implementing mandatory cyber incident reporting under the CIRCIA legislation.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers