HIPAA privacy and security
Healthcare and life sciences organizations face a dual enforcement posture on HIPAA privacy and security right now: the U.S. Department of Health and Human Services Office for Civil Rights continues processing a backlog of breach investigations under the HIPAA Security Rule's technical safeguard requirements, while the U.S. Federal Trade Commission has extended its own authority over health data through the Health Breach Notification Rule, creating overlapping obligations for digital health companies and covered entities alike. The proposed HIPAA Security Rule overhaul published in late 2024 would mandate specific cybersecurity controls, including network segmentation and annual audits, and compliance teams are mapping existing vendor agreements against those draft requirements before a final rule lands.
Watch
- Proposed HIPAA Security Rule amendments: new mandatory technical controls under review
- FTC Health Breach Notification Rule: enforcement actions against non-HIPAA health apps expanding
- OCR right-of-access enforcement: civil monetary penalties issued to smaller covered entities
- State attorneys general HIPAA-parallel actions in California, New York, and Texas
- Business associate agreement gaps flagged in recent OCR resolution agreements
Recent material activity in Healthcare & Life Sciences
-
CMS renews NCQA deeming authority for Medicare Advantage HMOs and PPOs for six years
On July 27, 2026, CMS approved NCQA's renewal application for Medicare Advantage deeming authority, covering Health Maintenance Organizations and Preferred Provider Organizations. The six-year term allows NCQA-accredited…
Read a full sample brief → -
ECDC publishes week 30 Communicable Disease Threats Report covering Ebola, West Nile Virus, and respiratory surveillance across EU/EEA
The European Centre for Disease Prevention and Control issued its weekly Communicable Disease Threats Report for the period 18 to 24 July 2026. The report covers active threat monitoring for Ebola, West Nile Virus, Crime…
Read a full sample brief → -
Baxter recalls single lot of Cefazolin in Dextrose Injection over cardboard particulate contamination
Baxter International announced a voluntary nationwide recall on July 24, 2026 of Lot LD175708 (expiry February 14, 2027) of Cefazolin in Dextrose Injection, USP, 2G/100mL, due to cardboard particulate matter found in sol…
Read a full sample brief → -
Baxter recalls single lot of Cefazolin in Dextrose Injection over cardboard particulate contamination
Baxter International announced a voluntary nationwide recall on July 24, 2026 of one lot of Cefazolin in Dextrose Injection, USP, 2G/100mL, due to cardboard particulate matter found in solution. The recall covers Lot LD1…
Read a full sample brief → -
FDA issues Early Alert on Boston Scientific ENROUTE carotid neuroprotection systems over arterial sheath tip separation risk
FDA's Center for Devices and Radiological Health issued an Early Alert on July 24, 2026 for specific lots of the ENROUTE Transcarotid Neuroprotection System and ENROUTE Transcarotid Neuroprotection System Plus. Boston Sc…
Read a full sample brief → -
FDA issues Early Alert on Boston Scientific ENROUTE carotid neuroprotection systems over arterial sheath tip separation risk
FDA's Center for Devices and Radiological Health issued an Early Alert on July 24, 2026 for specific lots of the ENROUTE Transcarotid Neuroprotection System and ENROUTE Transcarotid Neuroprotection System Plus. Boston Sc…
Read a full sample brief → -
FDA grants full approval to zidesamtinib for ROS1-positive NSCLC following prior TKI therapy
The FDA approved zidesamtinib (Jideytro, Nuvalent, Inc.) on July 22, 2026 for adults with locally advanced or metastatic ROS1-positive non-small cell lung cancer who had received at least one prior ROS1 tyrosine kinase i…
Read a full sample brief → -
Sunny Pharmtech recalls three lots of injectable cyclophosphamide over steel particulate contamination
The FDA published a voluntary nationwide recall by Sunny Pharmtech, Inc. on July 24, 2026, covering three lots of Cyclophosphamide for Injection, USP, in 1g/vial and 2g/vial presentations. Steel particulate matter confir…
Read a full sample brief → -
FDA classifies diabetes digital behavioral therapeutic devices into Class II under special controls
On July 24, 2026, the FDA issued a final classification order placing diabetes digital behavioral therapeutic devices into Class II with special controls. The order establishes the regulatory pathway and codified special…
Read a full sample brief → -
FDA issues five-year import debarment order against Francis Esteban Matos following federal felony conviction
On July 24, 2026, FDA issued a final debarment order barring Francis Esteban Matos from importing or offering for import any drug into the United States for five years. The order follows a federal felony conviction for c…
Read a full sample brief →