On Monday, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a $125,000 settlement with a three-physician allergy practice in Connecticut for HIPAA Privacy Rule violations. According to OCR’s press release and corrective action plan, a physician responded to a reporter’s questions about the allergy practice turning away a patient with a service animal. While the allergy practice had HIPAA policies and procedures in place, the involved physician did not adhere to the policies. Further, once OCR uncovered the issue, it also found that the practice failed to sanction the involved physician in accordance with its policies.
Continue Reading Six-Figure OCR Settlement for Three-Physician Practice Failing to Follow Policies
Connecticut
Report on Cyber Readiness of Connecticut Utility Companies
Posted on
Posted in Cybersecurity, Data Breach
On September 18, 2018, Connecticut’s governor released an annual report on the cybersecurity sophistication and readiness of the state’s electric, natural gas and major water companies. The four participating utility companies were Aquarion, Avangrid, Connecticut Water and Eversource.
Continue Reading Report on Cyber Readiness of Connecticut Utility Companies
Connecticut Legislature Responds to Proliferation of Data Breaches
By Daniel J. Kagan on
Posted in Uncategorized
On June 4, 2018, the Governor signed into law Public Act 18-90, An Act Concerning Security Freezes on Credit Reports, Identity Theft Prevention Services and Regulations of Credit Rating Agencies (the “Act”), likely in reaction to the Equifax breach among many others. The title of the Act leaves little to the imagination as to its subject matter.
Continue Reading Connecticut Legislature Responds to Proliferation of Data Breaches
Connecticut’s New Cybersecurity Action Plan
By Brendan J. Cohen on
Posted in Cybersecurity
On May 3, 2018, Governor Malloy announced the release of the State of Connecticut’s Cybersecurity Action Plan, which builds on the State’s Cybersecurity Strategy launched in July 2017. Developed by Connecticut’s Chief Cybersecurity Risk Officer Arthur House and Chief Information Officer Mark Raymond, the Action Plan applies the seven principles set forth in the Cybersecurity Strategy – leadership, literacy, preparation, response, recovery, communication, and verification – to individuals, organizations, government agencies, and businesses.
Continue Reading Connecticut’s New Cybersecurity Action Plan