Governance, Risk and Compliance

In a new settlement with a New Vision Dental over a possible HIPAA failure, OCR warns healthcare providers that impermissible disclosure of health information on social media violates HIPAA.

More companies now recognize that with work-from-home, the perimeter has extended out and they must secure the edge.

AHA, CHIME, and AEHIS respond to Sen. Mark Warner’s policy ideas for healthcare cybersecurity and possible federal resources for sector challenges, centered around cyber insurance and incentives.

The U.S. Office of Management and Budget has been urged by the Information Technology Industry Council a trade group that includes Microsoft, Amazon, Intel, and Palo Alto Networks as members to discourage software bill of materials requirements from federal agencies amid the lacking maturity of SBOMs, reports SecurityWeek.

The move by telecommunications company Vonage to add Salesforce encryption aims to bolster security and improve compliance.

The FTC and HHS updated their interactive mobile health app tool for developers with a keen focus on supporting vendors with determining just what, if any, regulations apply to their tech.

Privitar research points out that while delays or obstacles around accessing data may be warranted along privacy grounds, proper design that embeds controls into products can help speed up any slowdowns caused by regulations.