PrivacySignal
← Front page

Search & browse the archive

The full corpus — beyond today's front page.

Reset

131 results · page 5 of 6

Healthcare
HIPAA Journal · · US Federal

HIPAA Security Rule Update Postponed: More Time Given to Implement Major HIPAA Security Rule Changes

Federal regulators have extended the timeline for HIPAA-regulated entities to comply with proposed updates to the HIPAA Security Rule, giving covered organizations additional time to prepare for the changes. The postponement applies broadly to entities subject to HIPAA, including healthcare providers, insurers, and their business associates.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
HIPAA Journal · · US Federal

Small Practice Owners Guide to HIPAA Compliance Programs

A guide from The HIPAA Journal addresses how small medical practice owners bear direct legal responsibility for HIPAA compliance, even when routine compliance tasks are delegated to staff or third parties. The piece outlines how that personal accountability shapes what a functioning compliance program needs to look like.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
HIPAA Journal · · US Federal

AdaptHealth Reports Material Cybersecurity Incident and Theft of Patient Data

AdaptHealth, a publicly traded home medical equipment and supplies company, has disclosed a cybersecurity incident it has classified as material, involving the theft of patient data. The breach affects customers who rely on the company for home health products including diabetes supplies and sleep therapy equipment.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Delaware & Florida Women’s Health Centers Announce Data Breaches

Two women's health clinics — one in Delaware, one in Florida — have disclosed separate data breach incidents involving unauthorized access to or retention of patient information. Both providers are covered under HIPAA, which governs the handling of sensitive health data.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

ClickFix Social Engineering Technique is the Leading Method for Malware Delivery

The ClickFix social engineering technique is the leading method of malware delivery, according to an analysis by researchers at ReliaQuest. […] The post ClickFix Social Engineering Technique is the Leading Method for Malware Delivery appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare#security Read original →
Healthcare
HIPAA Journal · · US Federal

Building a HIPAA Compliance Program as a Dental Office Manager

A guide aimed at dental office managers outlines the steps involved in building a HIPAA compliance program, starting with identifying how protected health information flows through a dental practice. The piece walks through the practical groundwork required to meet federal privacy and security requirements in a clinical office setting.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
HIPAA Journal · · US Federal

HHS Provides Update on its Artificial Intelligence RFI

The Department of Health and Human Services has released an update on its Artificial Intelligence Request for Information, outlining how it intends to accelerate AI adoption across the agency. The update signals that HHS is moving from information-gathering toward more concrete plans for integrating AI into federal health programs.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai Read original →
Healthcare
HIPAA Journal · · US Federal

Take the Guesswork out of HIPAA Compliance for Small Practices

The HIPAA Journal has published guidance aimed at small medical practices struggling with inconsistent or assumption-based approaches to HIPAA compliance, arguing that documented, systematic processes should replace informal judgments about what protections are already in place.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
HIPAA Journal · · US Federal

Security Researcher Identifies Quintet of Bugs in Toolkit Used in DICOM Medical Imaging Software

A quintet of vulnerabilities has been identified in a DICOM toolkit – OFFIS DCMTK – that is extensively used in […] The post Security Researcher Identifies Quintet of Bugs in Toolkit Used in DICOM Medical Imaging Software appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare#security Read original →
Healthcare
HIPAA Journal · · US Federal

HIPAA Compliance Made Easy for Small Practices

The HIPAA Journal published a practical guide aimed at small medical practices working to meet federal privacy and security requirements under HIPAA, covering obligations under both the Privacy Rule and the Security Rule.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy

#healthcare#regulation#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

Medtronic Starts Notifying Individuals Affected by April 2026 Cyberattack

Medtronic has begun notifying people whose data was exposed in a cyberattack that occurred in April 2026, with the ShinyHunters threat group claiming responsibility for the breach. The medical device company's notification process follows reporting by The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

DOJ’s Using Advanced Data Analytics and AI Tools to Combat Healthcare Fraud Before Payment

The DOJ's 2026 National Health Care Fraud Takedown resulted in record Medicaid fraud charges, with the agency crediting advanced data analytics and AI tools for enabling intervention before fraudulent payments are made rather than after.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai Read original →
Healthcare
HIPAA Journal · · US Federal

Allina Health System to Pay $12.5 Million to Settle Pixel Litigation

Allina Health System, a Minneapolis-based nonprofit serving patients in Minnesota and Western Wisconsin, has agreed to pay $12.5 million to settle litigation tied to its use of tracking pixels on its website or patient portal. The case follows a broader wave of lawsuits against health systems over third-party tracking tools that allegedly transmitted patient data to companies like Meta and Google.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Data Breaches Reported by Amicus Solutions: Huntsville Hospital Health System

Amicus Solutions, also known as Fedora Solutions, has disclosed a cybersecurity incident that affected Huntsville Hospital Health System. The hospital confirmed it was impacted by the breach, which was reported in connection with HIPAA compliance obligations.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

South Florida Injury Centers; Chickasaw Nation Department of Health Report Data Breaches

South Florida Injury Centers reported a hacking incident, and the Chickasaw Nation Department of Health disclosed a separate data breach, according to reporting in the HIPAA Journal. Both incidents involve healthcare entities covered under federal patient privacy rules.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Remote Desktop Tools are the Front Door in Healthcare, and Hackers are Walking Through

Healthcare organizations are increasingly being breached through remote desktop tools, which attackers are exploiting as a primary entry point, according to reporting in the HIPAA Journal. The trend persists even as overall cyberattack volume has shown some decline, per data from cybersecurity firm SonicWall.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

HIPAA Compliance Software

The HIPAA Journal has published an overview of HIPAA compliance software, describing how these tools are designed to help covered entities and business associates manage their obligations under federal health privacy law.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
DataBreaches.net · · International

UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo

Up to 40 NHS staff members may have improperly accessed the medical records of a young boy who was injured in a crocodile attack at a Cambridgeshire zoo. The case is under review amid concerns that access controls were not adequate for a high-profile patient.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

High-Severity Vulnerability Identified in OHIF Viewers DICOM

A high-severity vulnerability has been identified in OHIF (Open Health Imaging Foundation) Viewers DICOM, which could be exploited to steal […] The post High-Severity Vulnerability Identified in OHIF Viewers DICOM appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare#security Read original →
Healthcare
HIPAA Journal · · US Federal

Why You Don’t Need to Understand HIPAA to Make Your Small Practice HIPAA Compliant

An article from The HIPAA Journal argues that small medical practice owners can achieve HIPAA compliance without deep technical or legal knowledge of the regulation, suggesting that compliance is attainable through practical tools and guidance rather than expertise in the underlying rules.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
HIPAA Journal · · US Federal

Colorado Health Network; Kentucky Mountain Health Alliance Announce Data Breaches

Colorado Health Network and Kentucky Mountain Health Alliance have each disclosed separate data breaches, according to reporting in the HIPAA Journal. Details on the scope and nature of the compromised data remain limited in the available excerpt.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Minnesota Epilepsy Group; Campbell University; City of Middletown Announce Data Breaches

Three separate organizations — Minnesota Epilepsy Group, Campbell University, and the City of Middletown, Ohio — have each disclosed data breaches. The incidents span healthcare, higher education, and local government, suggesting no single attack but a broad pattern of exposure across different sectors.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
EDPS · · EU

Newsletter Digest - news from the EDPS

The European Data Protection Supervisor has released a newsletter covering four priority areas: the European Commission's Digital Omnibus legislative debate, cross-border health data protection, privacy safeguards for the EU Visa Application Platform's chatbot, and transparency in EU funding.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · AI governance · General readers · Policy

#healthcare#gdpr#ai Read original →
← Prev Page 5 of 6 Next →