On January 5, 2020, HR 7898, became law amending the Health Information Technology for Economic and Clinical Health Act (HITECH Act), 42 U.S.C. 17931, to require that “recognized cybersecurity practices” be considered by the Secretary of Health and Human Services (HHS) in determining any Health Insurance Portability and Accountability Act (HIPAA) fines, audit results or mitigation remedies. The new law provides a strong incentive to covered entities and business associates to adopt “recognized cybersecurity practices” and risk reduction frameworks when complying ...
Blog Editors
Recent Updates
- Telehealth Cliff Averted, for Now (but September Is Six Months Away)
- The End of the Self-Affirmed GRAS Pathway?
- DEA Telemedicine Rules Further Delayed Until (Nearly) 2026
- Gender-Affirming Care Protections Eroded by Recent HHS Guidance and White House Executive Orders
- Important Negotiating Points in Commercial Real Estate Purchase and Sale Contracts Negotiating the Letter of Intent