Through the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Congress called on the U.S. Department of Health and Human Services (HHS) to promulgate regulations that would help ensure the privacy and security of health information. The Standards for Privacy of Individually Identifiable Health Information (the Privacy Rule) and the Security Standards (the Security Rule) promulgated pursuant to HIPAA apply to 'covered entities' and limit the ability of such entities to use or disclose protected health information (PHI). The Privacy Rule defines a 'covered entity' as a health plan, health care clearinghouse, or health care provider who transmits health information in electronic form in connection with certain specified transactions. While the Privacy Rule and the Security Rule do not directly apply to employers, the requirements of these rules do apply to ERISA-covered 'group health plans' that are sponsored by many employers.
Lisa J. Sotto And Elisabeth M. McCarthyHIPAA
Through the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Congress called on the U.S. Department of Health and Human Services (HHS) to promulgate regulations that would help ensure the privacy and security of health information.
ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN LawJournalNewsletters
Already have an account? Sign In Now
For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.
NOT FOR REPRINT
© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
Entrepreneurship. It has such a romantic ring, doesn’t it? When we hear the word, we think of incredibly successful people who must lead a charmed life. But the truth of the matter is often far from that. Just ask Melissa Rogozinski whose recent book, Becoming Phoenix, tells a much different story.
Agentic AI introduces risks that are novel and complex, but the most effective response is a familiar one. Zero Trust answers the problem of when an AI agent misfires on its own by constraining what an agent can do rather than betting on how it will behave.
California is betting that it can accelerate AI adoption by acting as a demanding, trusted buyer, and that the governance evidence it extracts through procurement can become infrastructure the rest of the market reuses.
The outsourcing of office and administrative services is expected to grow 50%-60% in the next five years. Contrary to what decision-makers think, and what the service providers hope you think, the biggest risk in outsourcing isn't choosing the wrong provider. It's outsourcing the wrong process, under the wrong model, with the wrong performance measures and contract terms.
© Copyright 2026 ALM Global, LLC trading as Centellic.
Advertise with Us Customer Support Terms of Service Privacy Policy
