25% off all training courses Offer ends August 28, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends August 28, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Legal News about HIPAA Compliance

The HIPAA Journal legal news section contains details of the latest enforcement activities by the Department of Health and Human Services’ Office for Civil Rights, including settlements and civil monetary penalties, and legal actions taken against covered entities by state attorneys general.

You will also find brief details of class action lawsuits and other legal actions filed against covered entities for HIPAA violations, privacy violations, and data breaches, along with other legal news specifically relating to HIPAA or other legal matters of particular relevance to the healthcare industry.

Changes to HIPAA Rules are detailed in the HIPAA Updates category, although this section does include updates to state legislation, in particular any changes to breach notification and cybersecurity laws that are relevant to healthcare organizations.

Five Healthcare Providers Settle Pixel Class Action Lawsuits

Over the past 18 months, many healthcare providers have settled class action lawsuits over their use of website tracking and...

Ransom Cartel Mastermind Sentenced to 16 Years in Prison

The Belarusian cybercriminal behind the Ransom Cartel ransomware group has been sentenced to 16 years in prison for his role...

Settlements Resolve Data Breach Lawsuits Against McKenzie Health System & Aspire Health Alliance

Data breach settlements: McKenzie Health System; Aspire Health Alliance

Settlements have been agreed to resolve class action data breach lawsuits against McKenzie Health System in Michigan and Aspire Health...

Data Breach Lawsuits Settled by Omni Healthcare & Western Montana Clinic

data breach settlements: Omni Healthcare Financial Holdings and Western Montana Clinic.

Settlements have been agreed to resolve class action data breach lawsuits against Omni Healthcare Financial Holdings and its subsidiaries, and...

FTC; Utah; California Sue Him & Hers Over Business and Data Sharing Practices

Him & Hers lawsuit FTC, Utah, California

Him & Hers, a San Francisco, CA-based telehealth company, is being sued by the Federal Trade Commission (FTC) and the...

Banner Health; LifeStance Health Group Settle Tracking Technology Lawsuits

Banner HEalth LifeStance HEalth Group pixel settlements

Two healthcare providers have agreed to settle lawsuits over their use of pixels and other website tracking technologies. The tools...

News Categories

Notices

$3 Million Settlement Agreed to Resolve Healthcare Services Group Data Breach Litigation

Healthcare Services Group data breach settlement

Healthcare Services Group has agreed to pay $3,000,000 to settle litigation arising from a September 2024 cybersecurity incident that involved...

ApolloMD Agrees to Pay $4.02M to Settle Data Breach Lawsuit

ApolloMD data breach settlement

ApolloMD Business Services, a business associate that provides integrated, multispecialty physician, APC, and practice management services, has agreed to settle...

23andMe Pays $18 Million to Settle Multistate Data Breach Lawsuit

A coalition of 42 state attorneys general has agreed to a $18 million settlement with 23andMe (now Chrome Holding Co.)...

Atrium Health Pays Up to $1.8M to Resolve Pixel Lawsuit

Atrium Health Pixel data breach settlement

Charlotte-Mecklenburg Hospital Authority, doing business as Atrium Health, has agreed to pay up to $1,800,000 to settle a class action...

Vision Care Providers Settle Data Breach Class Actions

Total Vision; Naper Grove Vision care data breach settlements

Settlements have been agreed to resolve class action lawsuits against two vision care providers: Total Vision in California and Naper...

Physicians Primary Care of Southwest Florida Agrees to Data Breach Settlement

Physicians Primary Care of Southwest Florida data breach settlement

Physicians Primary Care of Southwest Florida was the victim of a targeted cyberattack in September 2024 that exposed patient data....

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist