The Office for Civil Rights (OCR) has announced its fourth cybersecurity investigation and settlement, noting a 264% increase in significant ransomware breaches since 2018. A recent settlement with a medium-sized healthcare provider involved a $250,000 payment and commitments to enhance the security of Protected Health Information (PHI). This investigation and settlement underscore the critical need
Healthcare Workplace Update
Labor and Employment Laws and Developments in Healthcare Industry
Blog Authors
Latest from Healthcare Workplace Update
What U.S. Healthcare Providers Trying to Leverage AI Can Learn from Australia Privacy Regulator’s Investigation into I-MED Radiology Network
Leveraging AI in healthcare requires vast amounts of data, but navigating privacy and data security laws is crucial. A recent investigation into Australia’s I-MED Radiology Network highlights concerns about using medical data for AI. This case offers valuable insights for U.S. providers, especially regarding compliance with HIPAA and other regulations. Read more.
Louisiana Limits Non-Compete Agreements for Physicians
Following the national trend toward prohibiting or limiting non-compete agreements, Louisiana Senate Bill 165 limits the length and geographical scope of non-compete agreements for both specialty and primary care physicians. The law goes into effect on Jan. 1, 2025. Under Senate Bill 165, non-compete agreements for physicians must expire three years or five years from…
Pennsylvania Bans Most Non-Compete Agreements for Healthcare Practitioners
Pennsylvania Governor Josh Shapiro has signed the “Fair Contracting for Health Care Practitioners Act” (House Bill 1633), which restricts the ability of employers and healthcare practitioners to enter into non-compete agreements. The Act goes into effect on Jan. 1, 2025. The Act represents a significant shift in the employment landscape for healthcare practitioners in Pennsylvania…
Rhode Island Prohibits Use of Non-Competition Agreements With Nurses; Governor Vetoes Broader Ban
Rhode Island Governor Dan McKee signed a new law (R.I. Gen. Laws § 5-34-50) that prohibits the enforcement of non-competition agreements with advanced practice registered nurses (APRNs) in the state on June 17, 2024. Surprisingly, only three days after the APRN prohibition was enacted, the Rhode Island legislature sent a proposed bill containing a full…
Nuanced Privacy Laws Means Healthcare Organizations Should Prioritize Protecting Personal Information

The healthcare industry is among the most highly regulated industries when it comes to privacy protections. In addition to the federal Health Insurance Portability and Accountability Act (HIPAA), healthcare providers also must comply with a growing number of state laws governing data privacy and security. Fully complying with this patchwork of privacy protections is a…
Sanction Policies Can Help Drive Cybersecurity and HIPAA Compliance, OCR Says
Many HIPAA covered entities and business associates struggle with developing and implementing a sanctions policy. What should it say, is zero-tolerance required, do we have to impose discipline in every case, etc. These are examples of frequent and thorny questions that arise in connection with the development and implementation of these policies. But they are…
OCR Official Speaks About Compliance Concerns for HIPAA Covered Entities and Business Associates
What do ransomware, Yelp, and website tracking technologies all have in common? They are troubling areas of concern for HIPAA covered entities and business associates, according to one official from the federal Office for Civil Rights (OCR) which enforces the HIPAA privacy and security rules. Recently, the Executive Editor of Information Security Media Group’s (ISMG’s)…
Hospital Mergers Double the Risk of a Data Breach, Study Shows
The healthcare sector is a prime target for data breaches. According to a summary by the HIPAA Journal, 32% of all data breaches between 2015 and 2022 were in the healthcare sector, “almost double the number recorded in the financial and manufacturing sectors.” Industry analysts cite to many reasons for this, including the sensitivity…
ChatGPT and HIPAA, Caution is Needed, Even ChatGPT Says So!

Recently, things may have sped up a little in your doctor’s office. The notes for your recent visit may have been organized and filed a little more quickly. You might have received assistance sooner than expected with a physician letter to your carrier concerning a claim. You also may have received copies of those medical…