Sen. Pat Toomey (R-PA) recently introduced a bill in the United States Senate that would establish a federal breach notification requirement for certain companies and preempt state breach notification laws that are currently in effect for 46 states. The Data Security and Breach Notification Act of 2012, S.3333, would require companies that “collect and maintain
June 2012
Alaska Medicaid Agrees to Pay $1.7 Million to Settle HIPAA Security Case
By Anna Kraus
The Department of Health and Human Services (HHS) announced yesterday that the Alaska Department of Health and Social Services, Alaska’s State Medicaid agency (Alaska Medicaid), has agreed to pay $1.7 million to HHS to settle potential violations of the HIPAA Security Rule. This is HHS’s first HIPAA enforcement action against a State…
OMB Extends Review of HIPAA/HITECH Rule
By Anna Kraus
The long-awaited final rule implementing changes to the Health Insurance Portability and Accountability Act (HIPAA) regulations mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act has been delayed once again. Although the rule was expected by July, the Office of Management and Budget (OMB) has updated its website…
Health Officials Emphasize Data Security for Providers’ Mobile Devices
Recently, officials from the Office of the National Coordinator for Health Information Technology (ONC) in the Department of Health and Human Services stressed the need for data security in connection with providers’ use of mobile devices for health care delivery. Approximately 81 percent of physicians use smart phones or mobile devices. The need for data…
House Hearing Discusses Merits of Comprehensive Federal Privacy Legislation, Self-Regulation
The House Judiciary Subcommittee on Intellectual Property, Competition, and the Internet recently held a hearing entitled “New Technologies and Innovations in the Mobile and Online Space, and the Implications for Public Policy.” Much of the discussion focused on the relative merits of self-regulation versus the enactment of comprehensive federal privacy legislation. (Separately, the Senate Commerce Committee…
Settlement Reached in Data Security Breach Lawsuit Against Bank
Yesterday, Village View, Inc. reached a settlement with Professional Business Bank, a California state-chartered bank subject to regulation by the Federal Deposit Insurance Corporation (FDIC), over the company’s lawsuit against the bank arising from a data security breach. In March 2010, Village View lost nearly $400,000 after the company’s bank account was compromised by hackers. …
Key Holdings in the In re iPhone Application Dismissal Order
By: Shel Abramson
The United States District Court for the Northern District of California recently dismissed with prejudice most claims asserted by consumer plaintiffs in In re iPhone Application Litigation, including causes of action under the Stored Communications Act (“SCA”), the Wiretap Act, and other federal and state laws. Plaintiffs asserted that Apple and a…
N.H. Governor Vetoes Right of Publicity Survival Bill
Recently, Governor John Lynch of New Hampshire vetoed a bill (S.B. 175) that would have allowed an individual’s heirs to control the commercial use of the individual’s identity for 70 years following death. Not all states recognize the “right of publicity” — the right for an individual to control his or her commercial likeness —…
NTIA Announces Meeting to Develop Mobile Transparency Code
As we previously described, the White House recently released a landmark privacy report, entitled Consumer Data Privacy in a Networked World, which outlines key privacy principles in its “Consumer Privacy Bill of Rights” and calls on the National Telecommunications & Information Administration (NTIA) to work with industry and others to develop voluntary but…
Privacy at a cost? Recent smart meter litigation in Maine
Interesting questions are arising in relation to how to implement an “opt out” for smart meters. In many states, customer unease about the privacy and safety concerns associated with smart meters has resulted in new legislation or regulations that give customers the ability to decline the installation of a smart meter. However, smart meters enable…