This website and our authorized third-party service providers use cookies to achieve the purposes described in our Privacy Policy. If you would like to learn more or withdraw your consent to some or all cookies, please review our Privacy Policy. By selecting “I ACCEPT” on this banner, scrolling this page, clicking any link, or continuing to browse this site, you agree to the use of cookies.
The Office for Civil Rights (OCR) shattered all monetary settlement records for violations of the HIPAA (Health Insurance Portability and Accountability Act) privacy, security and breach rules in the fiscal year ended this past Sept. 30, according to a study by the law firm McDermott Will & Emery.
In fiscal 2016, OCR socked companies $25,6 million for HIPAA violations, up from a measly $7.9 million the year before, the study found.
OCR, the HIPAA enforcement arm for the Department of Health and Human Services (HHS), also reached an additional 13 settlements known as "resolution agreements." OCR had never before resolved more than seven HIPAA cases in a year.
The three HIPAA rules protect consumers' protected health information (PHI), but by federal law, individuals have no right of legal action against companies for violating their PHI. The 2013 HIPAA Omnibus Rule, however, did cede to the states the power to allow such individual action.
Practical articles on HR, Safety, compliance, and people operations—written for real businesses, not legal textbooks.
U.S. Department of Labor Officially Restores Prior Overtime Exemption Rules
On May 14th, 2026, the Wage and Hour Division (WHD) of the U.S. Department of Labor (DOL) announced it has officially rescinded the 2024 overtime exemption rules. Specifically, the WHD published a technical amendment to restore previous 2019 regulations that dictated overtime exemptions for...
NLRB General Counsel Takes Action to Tackle Current Case Backlog
On May 6th, the National Labor Relations Board (NLRB) and NLRB General Counsel Crystal Stowe Carey announced the bulk transfer of thousands of labor practice cases. Specifically, this action fulfills an initiative signed by the NLRB General Counsel earlier this year. Overall, the initiative...
Privacy Agency Invites Comments from Businesses on the CCPA’s Usage of Personal Data
Recently, the California Privacy Protection Agency (CPPA) issued a call for comments on the current state of personal data collection under the California Consumer Privacy Act (CCPA). Specifically, the invitation to deliver remarks was issued on April 20th, 2026. The information provided by the...
DOL Proposes New Joint Employer Rule To Unify Standards Under Federal Labor Laws
In April 2026, the U.S. Department of Labor issued a proposed rule to establish a single, clear standard for determining when joint-employer status applies under three major federal laws: the Fair Labor Standards Act (FLSA), the Family and Medical Leave Act (FMLA), and the Migrant and Seasonal...
DOL Updates Enforcement Approach for Employee Benefit Plans: What Employers Should Know
The U.S. Department of Labor (DOL) recently announced a significant change in its enforcement of employee benefit plan rules. The DOL will now focus more closely on serious violations that harm workers and retirees, meaning compliant employers may face less scrutiny under the updated approach.