Pamela Del Negro

Pamela Del Negro

Pamela H. Del Negro advises institutional providers, including hospitals and ambulatory surgery centers, as well as physician practice groups, community providers, and other health care entities on health care issues and general corporate matters. She provides legal counsel on a full range of transactional and regulatory health law issues, including co-management arrangements; compliance plans; the acquisition and merger of medical entities; Medicare and Medicaid fraud and abuse and the Stark law; hospital affiliations; the privacy and security of personal health information; corporate governance; private placements; and contracting. She also works with clients on managed care contracting, the corporate practice of medicine issues, clinical integration and antitrust issues, and the structuring and acquisition of electronic health records technology, including the negotiation and documentation of software agreements. Read her rc.com bio here.

 

Subscribe to all posts by Pamela Del Negro

Cloudflare Software Bug Causes Data Leak

Cloudflare, Inc., a provider of performance and security solutions for websites, recently disclosed that a software bug caused it to leak customer data that was then cached by search engines. Uber, Fitbit, and OkCupid sites may have been affected. While the leaked data is believed to contain private information, the extent of that information is … Continue Reading

Trading Card Maker Topps Notifies Customers of Data Breach

According to several media outlets, Topps, whose products include sports trading cards, recently notified customers via email of a security breach. Information that may have been compromised includes bank account numbers, names, and email addresses of customers who placed orders between July 30 and October 12, 2016. Topps has not publicly released the number of … Continue Reading

FTC Releases Tips and Advice on Ransomware

On November 10, 2016, the Federal Trade Commission (FTC) released tips and advice for businesses and consumers on ransomware. For businesses, the FTC released Ransomware – A closer look and a companion video, Defend against Ransomware. The FTC’s recommendations for businesses include: Have a tested business continuity plan in place to reduce disruption in the … Continue Reading

OCR Releases HIPAA Guidance on Cloud Computing

On October 6, 2016, the Department of Health and Human Services Office for Civil Rights (OCR) released HIPAA guidance on cloud computing (Guidance). The Guidance is intended to help covered entities and business associates understand their HIPAA obligations in cloud computing arrangements, and clarify the HIPAA obligations of cloud service providers (CSPs). The Guidance notes … Continue Reading

Information From 700+ Patients Stolen from LAC+USC Medical Center

Los Angeles County-USC Medical Center (LAC+USC) has notified patients that the protected health information of over 700 patients seen in the LAC+USC neurosurgery clinic was stolen from an employee’s car. The information, which was contained on appointment lists, included patients’ names, dates of birth, medical record numbers, telephone numbers, gender, and date/time of scheduled appointments, … Continue Reading

CMS allows qualified entities to sell claims data

The Centers for Medicare and Medicaid Services released a final rule permitting “qualified entities” to sell Medicare claims data to providers and others for use in improving quality of care. The rule expands on CMS’ Qualified Entity Program, which permits organizations to apply to become qualified to receive Medicare Parts A, B, and D claims … Continue Reading

Connecticut Legislative Update: Public Act 16-77: An act concerning patient notices, designation of a health information technology officer, assets purchased for the state-wide health information exchange and membership of the state health information technology advisory council

This legislation (P.A. 16-77) makes substantive and technical changes related to Public Act 15-146, a major public health and health care bill passed by the Connecticut Legislature during its 2015 Legislative Session. CONNECTICUT HEALTH INSURANCE EXCHANGE CONSUMER INFORMATION WEBSITE Under current law, Connecticut’s Health Insurance Exchange (HIX) is required, within available resources, to establish and … Continue Reading

Facebook biometric class action continues in California

A federal district court in California recently rejected Facebook’s request to dismiss a class action lawsuit related to Facebook’s biometric facial recognition database. The case arises from a complaint by Illinois residents that Facebook’s “Tag Suggestions” program violates the Illinois Biometric Information Privacy Act (BIPA) [view related posts here, here and here]. When a Facebook user uploads … Continue Reading

GAO Report: EINSTEIN not meeting stated objectives

According to a recent GAO report, the Department of Homeland Security’s (DHS) National Cybersecurity Protection System, commonly referred to as EINSTEIN, is not meeting its stated objectives. The purpose of EINSTEIN is to protect federal civilian executive branch agencies from cyber attacks. EINSTEIN monitors traffic to and from these agencies to identify malicious activity, serves … Continue Reading

Update on Hyatt data breach: Over 250 locations compromised

In December, Hyatt Corporation announced that it had identified malware on computers that operate its payment processing systems. Late last week, Hyatt disclosed that upon investigating the malware it discovered “signs of unauthorized access” to customers’ payment card data from 250 Hyatt locations in approximately 50 countries, representing approximately 40 percent of Hyatt’s hotels. A … Continue Reading

LifeLock settles with FTC for record $100 million

In its largest settlement ever obtained through an enforcement action, the Federal Trade Commission (FTC) announced yesterday that it had settled with identity theft protection firm LifeLock for $100 million. The no-fault settlement relates to a 2010 FTC enforcement action against LifeLock in which the FTC alleged that LifeLock misrepresented the effectiveness of its products … Continue Reading

ONC finalizes interoperability roadmap, includes milestones to be achieved by 2017

The Office of the National Coordinator for Health Information Technology (ONC) recently finalized the first version of its interoperability roadmap, Connecting Health and Care for the Nation: A Shared Nationwide Interoperability Roadmap. The Roadmap describes the goals to be accomplished in order to reach nationwide interoperability by 2024.  The first goal, to be completed between 2015-2017, … Continue Reading

Connecticut legislation requires consumer health information website

-Contributed by R+C’s Health Law Group Effective October 1, 2015, this legislation requires the Connecticut Health Insurance Exchange (HIX) to establish, by July 1, 2016, a consumer health information website that contains information comparing the quality, price, and cost of health care services among health care providers in Connecticut. The HIX website must include price … Continue Reading

Connecticut legislation establishes statewide Health Information Exchange

-Contributed by R+C’s Health Law Group Effective October 1, 2015, this legislation contains several provisions to encourage the free exchange of patient health information among providers and consumers. Hospitals, health systems, and electronic health record (EHR) providers are prohibited from “health information blocking,” and this legislation establishes that such action is an unfair trade practice. … Continue Reading

Survey: Majority of healthcare organizations experienced a significant security incident in recent past

The Healthcare Information and Management Systems Society (HIMSS) recently released the results of its 2015 HIMSS Cybersecurity Survey. The survey results are based on the response of 297 professionals, each of whom plays a role in information security in a large healthcare organization. Key findings from the HIMSS survey include the following: Approximately two-thirds of … Continue Reading

Two House Bills seek to address sharing of mental health information under HIPAA

The Health Subcommittee of the U.S. House Energy and Commerce Committee held a hearing last week to consider two bills addressing current limits on the sharing of mental health information under HIPAA.  The first bill, the Helping Families in Mental Health Crisis Act of 2015 (H.R. 2646), was introduced by Representative Tim Murphy.  H.R. 2646 … Continue Reading
LexBlog