Establishing and maintaining effective systems to protect sensitive personal data and confidential business information from outside interference while also assuring that privacy interests are protected is among an organization’s highest priorities. Our security and privacy team at Epstein Becker & Green has written extensively about the guidance and best practices issued by federal and state regulatory and enforcement agencies. Execution, monitoring and continually updating these preventive practices define an organization’s first line of defense. But what happens in the event that an organization actually suffers a breach? Is there guidance that might be available, particularly to healthcare organizations, to deal with continuity and disaster planning (BC/DR) directed towards assuring resilience and recovery in the event of a potentially-disastrous cyberattack?
Throughout 2021, we closely monitored the latest privacy laws and a surge of privacy, cybersecurity, and data asset management risks that affect organizations, small and large. As these laws continue to evolve, it is important for companies to be aware and compliant. We will continue to monitor these trends for 2022.
The attorneys of the Privacy, Cybersecurity & Data Asset Management group have written on a wide range of notable developments and trends that affect employers and health care providers. In case you missed any, we have assembled a recap of our top 10 blog posts of 2021, with links to each, below:
Recent Updates
- When AI Becomes Part of Medicine: Why CMS’s AI Questions Matter Now
- Watch: Gender-Affirming Care: What Health Care Providers Need to Know About Federal Enforcement – Thought Leaders in Health Law
- Executive Order 14321 at One Year: Civil Commitment Policy Shifts and Provider Impact
- Watch: FDA’s 2026 Enforcement Priorities: What In-House Counsel Must Know – Thought Leaders in Health Law
- The Future of 340B: New Bills Offer Competing Solutions to Modernize the 340B Drug Discount Program