On April 30, 2019, the Department of Health and Human Services (HHS) published in the Federal Register a notification of enforcement discretion indicating that it will lower the annual Civil Money Penalty (CMP) limits for three of the four penalty tiers in the Health Information Technology for Economic and Clinical Health Act (HITECH Act). The
Lindsay Brewer is an associate in the firm's Washington office. She advises clients on environmental, product safety, occupational safety, and public policy issues. She has experience with a wide range of environmental and safety programs, with a focus on the Clean Air Act (CAA), the Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA/Superfund), the Federal Trade Commission Act (FTC Act), the Consumer Product Safety Act (CPSA), the Federal Motor Vehicle Safety Standards (FMVSS), and the Occupational Safety and Health Act (OSH Act).
HHS Clarifies HIPAA Liability for EHR System Developers that Transfer Data to Health Apps
On Friday, April 19, 2019, the Office for Civil Rights of the U.S. Department of Health and Human Services (HHS) explained in an FAQ the circumstances under which electronic health record (EHR) systems may be subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) liability for an app’s impermissible use or disclosure…