Vimala Devassy

Subscribe to all posts by Vimala Devassy

Ransomware, COVID-19 and Regulations: Healthcare Entities Confront a Triple Threat

By Eric A. Packel, Vimala Devassy and Courtney Litchfield on July 1, 2021 Posted in Healthcare

Given what the healthcare industry faced in 2020, the seventh edition of our Data Security Incident Response (DSIR) Report, “Disruption and Transformation,” is aptly titled. As if fighting the COVID-19 pandemic weren’t enough for the industry to tackle, it also faced a surge of ransomware attacks, evolving legal/regulatory considerations, and novel and complex issues presented … Continue Reading

Compliance and Cybersecurity Best Practices Rewarded with HIPAA Safe Harbor

By Vimala Devassy, Sara Goldstein and Kyle Gregory on January 13, 2021 Posted in Healthcare, HIPAA/HITECH

On January 5, 2021, H.R. 7898 was signed into law with little fanfare, thereby amending the Health Information Technology for Economic and Clinical Health Act.[1] As the healthcare industry continues to serve as one of the top targets for cybersecurity threat actors, the amendment creates a “HIPAA safe harbor” that should hopefully provide some much-needed relief to those … Continue Reading

ONC Announces Delay of Information Blocking Provisions

By Vimala Devassy on October 29, 2020 Posted in Healthcare, HHS

The Department of Health and Human Services’ (HHS)’ Office of the National Coordinator (ONC) published an interim final rule today delaying several key compliance deadlines in the ONC 21st Century Cures Act final rule – including that of the information blocking provisions, which were slated to become effective on November 2, 2020 – until April 5, … Continue Reading

CARES Act Significantly Revises Part 2 Rules to Better Align with HIPAA

By Kyle Gregory and Vimala Devassy on April 2, 2020 Posted in Healthcare, HIPAA/HITECH

On March 27, 2020, President Trump signed the Coronavirus Aid, Relief, and Economic Security Act (the “CARES Act”) into law. While the focus of the CARES Act has been on direct financial aid to Americans, the Act also contains a number of material revisions to the Federal privacy provisions that govern the confidentiality of substance-use … Continue Reading

HHS Issues Two Important Bulletins Waiving HIPAA Sanctions During the COVID-19 National Emergency

By Vimala Devassy on March 18, 2020 Posted in HHS

The HHS Office for Civil Rights (OCR) issued two important bulletins this week regarding the novel coronavirus disease (COVID-19) outbreak. On Mar. 16, OCR issued a limited waiver of HIPAA sanctions and penalties for noncompliance with certain provisions of the HIPAA Privacy Rule, including the requirement to obtain a patient’s agreement to speak with family … Continue Reading