By Kate Hickner and Andrew Wilber The HHS Office for Civil Rights (“OCR”) has issued a fact sheet clarifying which provisions of the HIPAA Privacy, Security, Breach Notification, and Enforcement Rules (the “HIPAA Rules”) apply directly to business associates. Although...
By Kate Hickner and Andrew Wilber It’s no secret that the health care industry is heavily regulated and that compliance with applicable law is imperative. This is especially true in today’s current enforcement environment – warranting a quick compliance reminder and...
By Rob Gilmore, Brett Krantz & Andrew Wilber On Wednesday, April 24, 2019, the Supreme Court of the United States issued an important decision regarding class-action arbitration. The 5-4 decision held that under the Federal Arbitration Act, a court cannot compel...
On June 27, 2018, the Ohio House of Representatives passed a bill that prevents businesses from being liable for data breaches as long as the business has an appropriate cybersecurity program. To be eligible for the so-called “safe harbor,” a business must create,...
On October 30, Morgan Stanley announced that it would leave the Protocol for Broker Recruiting — an agreement among more than 1,500 financial firms that lays out rules for financial advisers to follow when they leave one firm for another. The decision shocked the...
By: Andrew Wilber Last week, the consumer credit reporting agency Equifax revealed a massive data breach that exposed the personal information of 143 million Americans. From mid-May through July, hackers gained access to the agency’s system, which houses a trove of...