Securing your organization’s private data when vendors have access to it means managing relationships from beginning to end, panelists at CW’s virtual Cyber Risk and Data Privacy Summit agreed.
Adrianne Appel
Adrianne Appel writes regulatory news, policy, and trends for Compliance Week. She previously reported about policy developments for Bloomberg Law and Bloomberg Government.
Email: adrianne.appel@complianceweek.com
LinkedIn: Follow
Posted inRisk Management
HHS proposal aims to ‘shine a light’ on nursing home ownership
It is still too early in the rulemaking process to know what will be included in the Biden administration’s final rule on transparency of nursing home ownership, but there are some steps facilities can take to prepare, according to experts.
Posted inRegulatory Enforcement
Cornerstone Healthcare Group to pay $21.6M over false claims
Cornerstone Healthcare Group will pay more than $21.6 million to settle allegations it filed false claims to Medicare by inflating the cost of services, billing for unauthorized services, and other violations initially brought forward by a whistleblower.
Posted inRegulatory Enforcement
SEC cites CCO error in HITE Hedge short selling case
Investment advisory firm HITE Hedge Asset Management and its private fund clients agreed to pay more than $220,000 to settle allegations the firm violated a Securities and Exchange Commission rule concerning short selling.
Posted inRisk Management
HHS reports: Compliance reviews, health data breaches up
The number of compliance reviews by the Department of Health and Human Services of health organizations increased between 2017 and 2021, according to the agency’s latest reports to Congress.
Posted inInternal Controls
SEC, CFTC order Options Clearing Corp. to pay $22M over internal rule failures
Options Clearing Corp. agreed to pay $22 million as part of settlements with the Securities and Exchange Commission and Commodity Futures Trading Commission addressing charges the company failed to comply with internal rules to manage risks.
Posted inRisk Management
CISA strategist: What is an SBOM and why it matters to compliance
Cyberattacks on software are increasing, and the best chance organizations have of protecting themselves is to know about potential vulnerabilities through a software bill of materials, CISA Strategist Allan Friedman shared at CW’s virtual Cyber Risk & Data Privacy Summit.
Posted inRegulatory Enforcement
Spacelabs Healthcare to pay $2.5M over VA contract false claims
Spacelabs Healthcare agreed to pay $2.5 million as part of a settlement with the Department of Justice resolving allegations it overcharged the U.S. Department of Veterans Affairs for medical devices.
Posted inData Privacy
CPPA seeking comment on cybersecurity audit, risk assessment rule adds
The California Privacy Protection Agency is seeking comment on privacy rules requiring certain large businesses to conduct annual cybersecurity audits and risk assessments if the state believes they are placing consumer data at risk.
Posted inData Privacy
Senators press telehealth firms on alleged sharing of patient data for ads
A bipartisan group of senators is leaning on three telehealth firms accused of tracking and sharing patients’ sensitive personal information with advertising platforms like Google and Facebook.
