Data Breach
Amended Oregon data protection act expands scope and regulates vendors
The updated law now requires vendors and subcontractors to send data breach notifications to their clients, as well as to the Oregon Attorney General.—Valerie Breslin Montague
Health Care and HIPAA
OCR releases new set of FAQs to address health plans’ use of PHI for care coordination and continuity of care
On June 26, 2019, the Department of Health and Human Services Office for Civil Rights (OCR) released a new FAQ document to address how the HIPAA Privacy Rule allows health plans to share PHI in certain circumstances.—Jena M. Grady