Person typing at laptop displaying a login screen with email and password fields

2 min read

Automatic logout for HIPAA compliance

As part of a broader security strategy, automatic logout helps healthcare providers protect sensitive information, reduce the risk of data breaches, and enhance auditability.

Read More
woman holding smartphone with calendar app holding pill packet

3 min read

Viral warning about period-tracking apps raises privacy concerns

Most period-tracking apps are not covered by HIPAA, leaving user health data vulnerable to legal requests.

Read More
woman holding smartphone

3 min read

Why HIPAA doesn’t cover period tracking apps

Most period-tracking apps are not directly associated with a healthcare provider or covered entity. They typically collect data for consumer use...

Read More
File folders with white labels in a filing cabinet drawer

2 min read

Should business associates provide an accounting of disclosures?

The HIPAA Privacy Rule does not require business associates to provide individuals with an accounting of disclosures. This responsibility falls...

Read More
Checklist with checkmarks on clipboard

2 min read

Preparing for a cyberattack

A single breach can lead to significant financial losses, damage to reputation, and legal liabilities. Fortunately, proactive planning and robust...

Read More
MacBook Air displaying Google search homepage next to a potted green plant on a desk

3 min read

Can mental health professionals google their patients?

Mental health professionals, like all healthcare providers, must comply with the Health Insurance Portability and Accountability Act (HIPAA), which...

Read More
Hooded hacker at computer with email icons and world map

3 min read

Ransomware group demands baguettes from Schneider Electric

Schneider Electric is investigating a ransomware attack claimed by the Hellcat group. The group is demanding $125,000 in baguettes and threatening to...

Read More
Person signing a document with a pen

2 min read

Can business associates amend PHI?

Business associates do not have the authority to grant individuals the opportunity to amend their PHI. Patients must submit amendment requests to the...

Read More
Pair of handcuffs on dark surface

2 min read

Learning from the arrest in the Snowflake data breach

Canadian law enforcement authorities recently apprehended Alexander Moucka, also known by the online aliases Judische and Waifu, in connection with a...

Read More
Stack of papers with colorful sticky tabs on an office desk

2 min read

Should business associates give individuals access to their PHI?

Business associates are not required to give individuals direct access to their protected health information (PHI). However, they must assist the...

Read More
Digital circuit board pattern with blue light streams and data nodes

3 min read

DHS and CISA outline post-quantum security steps for operational technology 

The US Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance to help operators...

Read More
Open padlock on a computer keyboard

2 min read

Canadian authorities arrest suspected hacker linked to Snowflake data breach

Canadian law enforcement has arrested Alexander Moucka, a suspect in a significant cyberattack that compromised the data of numerous Snowflake...

Read More
Person donating blood with blood bag and tubing visible

2 min read

Are blood banks bound by HIPAA?

Blood banks are generally not bound by HIPAA, but they adhere to FDA regulations, state privacy laws, and their own confidentiality policies to...

Read More