The full corpus — beyond today's front page.
131 results · page 1 of 6
A piece published via KevinMD argues that protecting health data in AI interactions requires decisions made before information is ever entered into a system, not after.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Jim Mackey says access to NHS systems should be cut off while allegations are investigated, as he urges trusts to take a ‘zero tolerance’ approach NHS staff suspected of snooping on patients’ medical records should be suspended immediately and barred from using health service computers, the head of NHS England has said. Jim Mackey urged NHS England’s 205 health trusts to pursue a “zero tolerance” approach to staff who are suspected of inappropriately accessing records. Continue reading...
Who should care: Healthcare professionals · Privacy officers · Compliance
Notification letters are being mailed to individuals affected by data breaches at the pharmacy benefit management service provider MedImpact Healthcare […] The post Data Breaches Announced by MedImpact Healthcare Systems; Rosch Visionary Systems appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
CVS Health, Criteo, and American Wellness Corp have agreed to pay $20.5 million to settle class action lawsuits tied to website tracking practices. The settlements resolve litigation that appears to center on how user data was collected and shared through tracking tools on health-related websites.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Data breaches have been announced by Gastroenterology & Hepatology of Central New York, Three Oaks Hospice, and Doctor’s Choice Home […] The post Data Breaches Announced by Gastroenterology Practice and Hospice Companies appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The California Senate has unanimously passed a bill to establish guardrails on the use of artificial intelligence in mental health treatment. The legislation moves forward amid broader national debate over how AI tools should be regulated in clinical and therapeutic settings.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy
A healthcare compliance attorney attended a two-day HIPAA Security Conference hosted by the Office for Civil Rights at the NIST campus in Gaithersburg, sharing observations from the event. The conference brought together regulators and compliance professionals to discuss healthcare data security requirements.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
October is Cybersecurity Awareness Month, a global effort to promote online safety and digital security. Launched in 2024 by the […] The post Cybersecurity Awareness Month 2026: Critical Infrastructure Urged to Adopt Cybersecurity 3Rs appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Each year, millions of taxpayers’ dollars are lost to Medicare and Medicaid fraud, with fraud related to durable medical equipment, […] The post HHS-OIG Urges CMS & MA Organziations Increase Efforts to Prevent Durable Medical Equipment Fraud appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
On September 17, 2026, two Democratic Senators reintroduced the Health Infrastructure Security and Accountability Act, which seeks to improve cybersecurity […] The post Democratic Senators Reintroduce the Health Infrastructure Security and Accountability Act appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
A hacking group has claimed responsibility for an August 2026 cyberattack on Cedar County Memorial Hospital in Missouri. Hacking-related data […] The post Hacking Group Claims Attack on Cedar County Memorial Hospital appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
On September 15, 2026, the United States House Energy and Commerce Committee Subcommittee on Health held a legislative hearing on […] The post House Subcommittee on Health Examines Healthcare Cybersecurity Proposals appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
A hacking incident at Hawaii Family Dental has affected almost 46,000 individuals. Data breaches have also been announced by Life […] The post Hacking Incident Affects 46,000 Hawaii Family Dental Patients appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Department of Health and Human Services has released version 3.7 of its Security Risk Assessment Tool, a joint product from the Office for Civil Rights and the Office of the National Coordinator for Health IT designed to help organizations evaluate their HIPAA security compliance.
Who should care: Healthcare professionals · Privacy officers · Compliance
The FDA has published a discussion paper inviting public input on how generative AI tools used in medical devices should be regulated. The agency is in early stages of developing a framework for these technologies.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · AI governance · Policy
The U.S. Department of Health and Human Services has released version 3.7 of its Security Risk Assessment Tool, designed to help covered entities evaluate their compliance with HIPAA security requirements.
Who should care: Healthcare professionals · Privacy officers · Compliance
A high-severity vulnerability has been identified in Orthanc DICOM Server that could be exploited by an authenticated remote attacker to […] The post Orthanc DICOM Server Vulnerability Can Lead to Denial of Service appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Three high-severity vulnerabilities have been identified in NextGen Healthcare Mirth Connect (Mirth Connect), a cross-platform healthcare integration engine for connecting, […] The post High Severity Vulnerabilities Identified in NextGen Healthcare Mirth Connect appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Wellstar Health System and Cone Health (operating as Moses H. Cone Memorial Hospital) have agreed to settle class action lawsuits tied to the use of tracking pixels on their websites or patient portals. The settlements resolve claims that the hospitals shared patient data with third parties through embedded tracking technology.
Who should care: Healthcare professionals · Privacy officers · Compliance
Luminis Health, a Maryland-based health system, is responding to a cyberattack that knocked certain systems offline. The organization is actively investigating the incident.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new survey found that patients want transparency about when and how artificial intelligence is used in their healthcare, including by doctors' offices and other medical providers. The findings point to a clear gap between how AI is being adopted in clinical settings and what patients expect to know about it.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
SonicWall has disclosed two zero-day vulnerabilities in its SMA1000 remote access appliances that attackers are actively chaining together to execute arbitrary code remotely. The flaws are already being exploited in the wild, meaning patches or mitigations are urgent rather than routine.
Who should care: Healthcare professionals · Privacy officers · Compliance
Resource Center of Dallas has notified approximately 12,500 patients that their information was exposed in a cyber incident, joining several other healthcare organizations — including Kern Psychiatric Health and Wellness Center and The Asthma Center — in recently disclosing breaches.
Who should care: Healthcare professionals · Privacy officers · Compliance
Fourteen organizations have expressed interest in joining the federal government's electronic health record program, as the office overseeing its deployment looks to shift toward cloud infrastructure, improve data-sharing between systems, and expand its use of AI.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy