The District Court for the District of Columbia recently invalidated certain Department of Health and Human Services (“HHS”) rules regarding an individual’s access to their protected health information (“PHI”). The Court held that: (1) individuals can only direct their electronic PHI to third parties (and not hard copy PHI); and (2) the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Omnibus Rule provisions regarding the caps on fees that HIPAA-covered entities may charge for such requests did not follow relevant administrative law procedures.
Continue Reading District Court Limits HIPAA Right of Access

On December 18, 2019, the House Energy and Commerce Committee released a bipartisan staff-level draft privacy bill. The bill would create a new Bureau of Privacy within the Federal Trade Commission to enforce the bill and an Office of Business Mentorship to assist companies with compliance.
Continue Reading House Energy and Commerce Committee Staff Release Bipartisan Draft Privacy Bill