On February 8, 2024, the Department of Health & Human Services (HHS) published its final rule updating the Confidentiality of Substance Use Disorder (SUD) Patient Records regulations under 42 C.F.R. Part 2 (Part 2), bringing Part 2 requirements closer to the requirements of the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information
Health Insurance Portability and Accountability Act (HIPAA)
HIPAA Privacy Rule in Focus: OCR Sheds Light on PHI Disclosures and Access Rights
On August 11, 2025, the Office for Civil Rights (OCR) published updated guidance relating to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (Privacy Rule) in the form of two new FAQs. The FAQs clarify the OCR’s position on (1) permitted disclosures of protected health information (PHI) to value-based care arrangements and (2)…
Purl v HHS: Resetting the Reproductive Health Privacy Landscape
Reproductive health privacy is once again in the legal spotlight with a recent federal district court decision that struck down nearly all of a recent rule under the Health Insurance Portability and Accountability Act (HIPAA) that protected reproductive healthcare-related information privacy.
In a ruling issued on June 18, 2025, in Purl v. Department of Health…
Getting Too Personal? Illinois Court Says Family Medical History is Genetic Information
On May 15, 2025, a district court in Illinois denied a motion by defendant Hospital Sisters Health System and Saint Francis (HSHS) to dismiss a class action claim brought against the hospital system under the Illinois Genetic Information Privacy Act (GIPA).
GIPA regulates the use, disclosure, and acquisition of genetic information and has adopted the…
Data Breach Lawsuits Surge Against Chord Specialty Dental Partners
Pennsylvania-based Chord Specialty Dental Partners is under fire after a September 2024 data breach compromised the personal information of over 173,000 individuals. At least seven proposed class action lawsuits have been filed in federal courts in Tennessee and Pennsylvania, alleging the company failed to secure and protect patient data properly.
The lawsuits claim Chord Dental…