Nearly 75% of health care employees are shadow using AI, resulting in more than 80% of data policy infractions, a panelist said during the Health Care Compliance Association event Wednesday. Accordingly, providers should directly address the issue with staff immediately and implement measures that make employees' AI tools less of a privacy risk.
Health Privacy and HIPAA
Privacy Daily follows regulatory changes to and enforcement of the federal Health Insurance Portability and Accountability Act (HIPAA). The law governs how health care providers, insurers and other covered entities handle protected health information and imposes safeguards to prevent unauthorized access or disclosure. We also track new health privacy laws in the states including the Washington My Health My Data Act and a similar bill passed in New York state. Coverage includes significant HIPAA violations, enforcement actions and trends that shape how health data is collected, shared and secured.
Focusing on trends can be a helpful way for health care companies to anticipate coming privacy laws and future compliance needs, said Kyle Rene, Whiteford Taylor lawyer, at a Health Care Compliance Association event Wednesday.
When immigration enforcement and patient privacy collide, health care providers must remember that HIPAA's view of personal health information (PHI) is broad, Davis Wright's Adam Greene told a Health Care Compliance Association event Wednesday.
Senate Health Committee Chairman Bill Cassidy, R-La., on Tuesday proposed health data transparency requirements for non-HIPAA entities.
CHICAGO -- Privacy regulators are looking beyond a company’s privacy policy when they review its advertising practices, said panelists at an Association of National Advertisers (ANA) ad law conference Monday. That can help or hurt an entity under investigation, they said. Also, panelists said it’s important to convey the value of privacy, not just its costs, in business conversations.
Amid intensifying regulatory pressure about kids' online safety, Character.AI said Wednesday that it will roll out age assurance and remove “the ability for users under 18 to engage in open-ended chat with AI" on its platform by Nov. 25. The changes respond to questions raised by regulators and in recent news reports “about the content teens may encounter when chatting with AI and about how open-ended AI chat in general might affect teens,” the chatbot platform said.
A Pennsylvania genetic data privacy bill could soon get a House floor vote, amid increased interest in the topic this year following the 23andMe bankruptcy. The House Consumer Protection Committee voted 26-0 on Wednesday to clear HB-1530 by Chair Danilo Burgos (D), with members from both political parties joining hands to vote yes.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
While there hasn't been a big headline for privacy in 2025, many important smaller developments occurred, George Washington University law professor Daniel Solove and Red Clover Advisors CEO Jodi Daniels said during a webinar Solove hosted Thursday.
State attorneys general have relied on a combination of state consumer protection law, state comprehensive privacy law, federal children’s privacy law and multistate letters in cases against privacy violators, according to a new report from the Electronic Privacy Information Center.