On August 18, 2026, the Cybersecurity & Infrastructure Security Agency, Federal Bureau of Investigation, and U.S. Department of Health & Human Services issued an update to a previous advisory to the health care industry warning against Medusa ransomware. The advisory provided tactics, techniques, and procedures as well as the indicators of compromise gathered to assist
Department of Health & Human Services (HHS)
HHS Aligns Part 2 Program Confidentiality Rules with HIPAA Standards
By Roma Patel on
Posted in Data Privacy
On February 8, 2024, the Department of Health & Human Services (HHS) published its final rule updating the Confidentiality of Substance Use Disorder (SUD) Patient Records regulations under 42 C.F.R. Part 2 (Part 2), bringing Part 2 requirements closer to the requirements of the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information…
Purl v HHS: Resetting the Reproductive Health Privacy Landscape
By Roma Patel on
Posted in HIPAA and Health Information
Reproductive health privacy is once again in the legal spotlight with a recent federal district court decision that struck down nearly all of a recent rule under the Health Insurance Portability and Accountability Act (HIPAA) that protected reproductive healthcare-related information privacy.
In a ruling issued on June 18, 2025, in Purl v. Department of Health…