One year after Connecticut became the fifth state in the nation to adopt a consumer data privacy law, the state Legislature emerges again as a data privacy leader by adding protections for consumer health data and minors to the Connecticut Data Privacy Act (“CTDPA”). With unanimous votes in the state House and the Senate, An […]
On May 18, 2023, the day after the Federal Trade Commission (FTC) announced only its second enforcement action under the Health Breach Notification Rule (HBNR) in 13 years, it released proposed changes to “strengthen and modernize” the rule. Those proposed changes will substantially expand the scope of the HBNR. Congress, however, never intended that the […]
Healthcare providers carry a heavy load and it just got heavier. In the wake of the reversal of Roe v. Wade and the prohibition and criminalization of abortion in some states, healthcare providers are now burdened with being more vigilant than ever in defending patients’ privacy rights. This is true in all states, even where […]
The Federal Trade Commission’s Health Breach Notification Rule (HBNR) is a perfect example of a narrowly tailored regulation that only contributes to the cumbersome patchwork of privacy rules in this country without providing any real benefit. In this blog post, I explore the problems with the HBNR and why we should focus instead on creating meaningful, comprehensive privacy legislation.