This website and our authorized third-party service providers use cookies to achieve the purposes described in our Privacy Policy. If you would like to learn more or withdraw your consent to some or all cookies, please review our Privacy Policy. By selecting “I ACCEPT” on this banner, scrolling this page, clicking any link, or continuing to browse this site, you agree to the use of cookies.
The U.S. Department of Health and Human Services (HHS) moved forward today to strengthen the privacy and security protections for health information established under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
The final omnibus rule, published today in the Federal Register, greatly enhances a patient’s privacy protections, provides individuals new right...
In its annual report to Congress, the Office for Civil Rights (OCR) said it is developing audit protocol to conduct audits of up to 145 covered entities in an ongoing effort to enforce the privacy and security rules of HIPAA.
The Office for Civil Rights of the Department of Health and Human Services (HHS) is charged with enforcing the security and privacy rules of the Health Insurance Portabili...
The Department of Health and Human Services (HHS) is currently receiving public commentary on a proposed rule to expand the right of individuals to demand and receive "access reports" identifying who accessed their protected health information and why.
Under the Health Insurance Accountability and Portability Act (HIPAA) of 1996, individuals currently have a right to obtain such infor...
The Department of Health and Human Services (HHS) is aiming to release its long-awaited (and consolidated) Final Rule on the HIPAA privacy and security rules by the end of 2011, it was announced by Susan McAndrew, deputy director in the HHS Office for Civil Rights (OCR).
The revamped regulations for the privacy and security rules were mandated by the Health Information Technology for Economic a...
The Office of Civil Rights (OCR), the unit of the Department of Health and Human Services (HHS) responsible for monitoring health information breaches, recently reported that the total number of Americans affected by large data breaches has surpassed 10 million individuals.
With the enactment of the Health Information Technology for Economic and Clinical Health Act (HITECH) and its Breach Notif...
The Department of Health and Human Services (HHS), despite a health industry outcry, has forwarded to the Office of Management and Budget (OMB) a proposed rule allowing patients to request information about the disclosure of their protected health information (PHI).
An OMB review can take anywhere from one to 90 days to complete. After that, the rule generally takes effect in 30 to 60 days.
The...
Though on Aug. 4 it withdrew its Interim Final Rule regarding HIPAA security breach notifications, the Department of Health and Human Services (HHS) has since clarified on its Web site that the suspended rule of Sept. 23, 2009, remains in effect.
"This is a complex issue and the Administration is committed to ensuring that individuals’ health information is secured to the extent poss...
Coming under criticism for allowing covered entities (in this case, those health care providers and others who maintain health records) to police themselves in matters of maintaining the privacy of Protected Health Information (PHI), the Department of Health and Human Services (HHS) has withdrawn its breach rule of September 2009.
The already-in-effect interim final rule, called for under terms...
Though HITECH (the Health Information Technology for Economic and Clinical Health act) took full effect this past Feb. 17, provisions regarding business associates were still vague, as we noted at the time.
Now, the Office of Civil Rights (OCR) in the Department of Health and Human Services (HHS), the law's oversight agency, is promising to issue proposed rules soon, which typically would be fo...
As required by law, the Department of Health and Human Services (HHS) has begun publicly listing breaches of private health information (PHI), generally in medical records, when the breach totals 500 or more individuals.
Though breach notification rules under HITECH (Health Information Technology for Economic and Clinical Health Act) went into effect in September 2009, a grace period provi...
Practical articles on HR, Safety, compliance, and people operations—written for real businesses, not legal textbooks.
U.S. Department of Labor Officially Restores Prior Overtime Exemption Rules
On May 14th, 2026, the Wage and Hour Division (WHD) of the U.S. Department of Labor (DOL) announced it has officially rescinded the 2024 overtime exemption rules. Specifically, the WHD published a technical amendment to restore previous 2019 regulations that dictated overtime exemptions for...
NLRB General Counsel Takes Action to Tackle Current Case Backlog
On May 6th, the National Labor Relations Board (NLRB) and NLRB General Counsel Crystal Stowe Carey announced the bulk transfer of thousands of labor practice cases. Specifically, this action fulfills an initiative signed by the NLRB General Counsel earlier this year. Overall, the initiative...
Privacy Agency Invites Comments from Businesses on the CCPA’s Usage of Personal Data
Recently, the California Privacy Protection Agency (CPPA) issued a call for comments on the current state of personal data collection under the California Consumer Privacy Act (CCPA). Specifically, the invitation to deliver remarks was issued on April 20th, 2026. The information provided by the...
DOL Proposes New Joint Employer Rule To Unify Standards Under Federal Labor Laws
In April 2026, the U.S. Department of Labor issued a proposed rule to establish a single, clear standard for determining when joint-employer status applies under three major federal laws: the Fair Labor Standards Act (FLSA), the Family and Medical Leave Act (FMLA), and the Migrant and Seasonal...
DOL Updates Enforcement Approach for Employee Benefit Plans: What Employers Should Know
The U.S. Department of Labor (DOL) recently announced a significant change in its enforcement of employee benefit plan rules. The DOL will now focus more closely on serious violations that harm workers and retirees, meaning compliant employers may face less scrutiny under the updated approach.