The full corpus — beyond today's front page.
131 results · page 4 of 6
The HIPAA Journal has published an explainer on HIPAA audit checklists, describing them as structured tools that covered entities and business associates can use to assess their compliance with federal health privacy standards.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A House committee has advanced legislation that would block OSHA from finalizing or enforcing a federal heat safety standard for workers. The bill targets a rulemaking effort the agency has been developing to protect employees from heat-related illness on the job.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Department of Health and Human Services has added seven new industry pledges to its ongoing health technology initiative, which the Trump administration says has expanded app-based access to personal medical records to roughly 60% of Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HIPAA Journal has published a practical guide outlining how organizations can work toward HIPAA compliance, centering on the Department of Health and Human Services' seven-element compliance framework as a structured starting point following a risk assessment.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A Government Accountability Office report found that federal cyber incident reporting requirements for critical infrastructure operators may overlap across agencies, creating redundant obligations. The findings come as CISA prepares to finalize its rule implementing mandatory cyber incident reporting under the CIRCIA legislation.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
AnMed, a nonprofit health system operating across upstate South Carolina and Northeast Georgia, has shut down close to 80 facilities while responding to a cyberattack. The scale of the closure points to serious disruption across a regional system that serves a wide patient population.
Who should care: Healthcare professionals · Privacy officers · Compliance
MCBS, LLC, a healthcare management and revenue cycle services company based in Augusta, Georgia, has disclosed a cybersecurity incident affecting approximately 1.26 million individuals. The company works in revenue cycle management, meaning it processes sensitive patient financial and health data on behalf of healthcare providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
U.S. private equity firm TPG has acquired Optum UK, the company behind the electronic patient record system used by most GP practices in England, in a deal valued at approximately £300 million. The acquisition means a American private equity firm will now control the health records of millions of NHS patients, prompting concern from doctors and MPs.
Who should care: Healthcare professionals · Privacy officers · Compliance
Four healthcare facilities — Wildwood Surgical Center, Michigan Surgical Center, Penobscot Valley Hospital, and Whitfield Regional Hospital — have each disclosed separate data breaches. The incidents were reported in the HIPAA Journal, though the scope, timing, and nature of each breach have not been detailed in the available information.
Who should care: Healthcare professionals · Privacy officers · Compliance
Author and national security reporter Annie Jacobsen argues that AI is simultaneously lowering the barrier for creating biological weapons and offering new tools for disease surveillance and public health response. She calls for urgent investment in AI-powered defensive systems to keep pace with the offensive capabilities the technology enables.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy
A new report tracking data breach trends finds that malicious insider incidents are rising, and that large-scale 'mega breaches' are becoming more common. The current year is on pace to continue or exceed recent records in overall breach volume, according to findings covered by The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
DentaQuest, a dental benefits administrator, is notifying more than 15 million people that their information was compromised in a cybersecurity incident that occurred in May 2026. The company has begun sending notification letters to those affected.
Who should care: Healthcare professionals · Privacy officers · Compliance
Clover Health Investments has filed an SEC disclosure reporting a cybersecurity incident, identified in July, that involved social engineering. The company says it is still assessing the scope and impact of the breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Craneware, a healthcare technology company that provides financial and operational software to hospitals and health systems, is investigating a cyberattack and has confirmed that a significant volume of data was compromised. The full scope of the breach has not yet been disclosed.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Department of Health and Human Services, through CMS and the CDC, has issued a request for public input on possible updates to the Clinical Laboratory Improvement Amendments regulations, which govern quality standards for laboratory testing across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Office of Management and Budget has published its 2026 Unified Agenda, laying out the regulatory actions federal agencies plan to propose or finalize this year. Among the items flagged are several HHS rules touching on health privacy, interoperability, and data exchange.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy
The healthcare giant Abbott is investigating claims from two threat groups who allege cyberattacks and data theft, one involving legacy […] The post Abbott Investigating Cyberattack Claims From Two Threat Actors appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Mozilla research found that Stardust, a period tracking app, shares users' health data with a third-party analytics firm. The findings reveal significant variation in privacy practices across period tracker apps, with at least one app handling data responsibly while Stardust did not.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Three healthcare organizations — Ohio Living, a senior living provider, Erlanger Health System in Tennessee, and Heart of America Eye Care — have each disclosed separate data breaches. All three operate in sectors covered by HIPAA, meaning the compromised data likely includes sensitive medical and personal information.
Who should care: Healthcare professionals · Privacy officers · Compliance
A review of popular wearable devices — including Oura Ring, Apple Watch, Garmin, and Whoop — finds that most fall short on basic privacy and security standards, lacking transparency reports and strong encryption options despite collecting continuous personal health data from roughly 40 percent of Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Community Health Center of Buffalo and New Jersey law firm Greenbaum Rowe Smith & Davis have each disclosed separate data breaches. The incidents, reported via The HIPAA Journal, involve organizations that handle sensitive medical and legal information respectively.
Who should care: Healthcare professionals · Privacy officers · Compliance
A piece from The HIPAA Journal examines the growing compliance burden on the medical device industry, pointing to the sector's expanding presence in everyday healthcare settings and the regulatory expectations that follow.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A new study found that most healthcare websites deploy third-party marketing and analytics tools that could expose sensitive patient information to outside companies. The findings point to a systemic gap between what healthcare sites collect and what patients reasonably expect about who sees their data.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Three healthcare organizations — ERMI, a Georgia medical equipment company; McLeod Physician Associates in South Carolina; and Centers for Dialysis Care — have each announced separate data breaches. All three operate in sectors that handle sensitive patient health information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance