The Gramm Leach Bliley Act (GLBA) of 1999 (Pub. L 106-102, 113 Stat.1338) has two parts.

The first allows for the consolidation/merger of financial institutions such as banks, insurance companies and investment/security firms.

The second regulates the use, disclosure (sharing) and security of the massive amounts of personal information (which includes health records)

In 2017, President Trump issued a call to action that led to the declaration of a nationwide public health emergency regarding the opioid crisis. In response, the Office for Civil Rights (OCR) issued guidance on how HIPAA allows information sharing to address the opioid crisis.

OCR’s guidance, released in October 2017, addresses when and how

The 21st Century Cures Act of 2016 (Cures Act) mandated the Department of Health and Human Services (HHS) to simplify the authorization process for individuals who want to release Protected Health Information (PHI) for research purposes. Individual authorization is necessary if the information will be utilized or shared in any format other than aggregate (without

A recent Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules ruling in Houston, Texas, against MD Anderson Cancer Center underscores the importance of not just developing, but following established rules, policies and procedures. The lack of policies and procedures is always problematic but often, the failure to follow existing ones

Under which type of disaster can HIPAA privacy rule be waived?

In the wake of the Las Vegas Massacre, you may expect that the department of Health and Human Service (HHS) would waive Health Insurance Portability and Accountability Act (HIPAA) privacy rule requirements like they did during the hurricanes. Not so much this time.


In preparation for severe disasters, the Secretary of HHS declares a public safety emergency and issues a limited waiver of Health Insurance Portability and Accountability Act (“HIPAA”) sanctions and penalties), enabling hospitals to share information to assist in disaster relief efforts and ensure that patients receive the care they need.

A waiver of this type