Privacy

All our posts in one place

Confidentiality Coalition and HLC response to Health Data, Technology and Interoperability: ASTP/ONC Deregulatory Actions to Unleash Prosperity (HTI-5) proposed rule

The Healthcare Leadership Council and the Confidentiality Coalition submitted comments on the proposed HTI-5 rule supporting efforts to reduce unnecessary regulatory burdens while emphasizing that patient privacy, data security, and trust must remain protected as health information technology rules are updated. They urged the government to preserve safeguards that enable the secure exchange of health information and avoid changes that could weaken confidentiality protections or create new privacy risks. Overall, the letter advocates for a balanced approach that encourages innovation and interoperability in healthcare while maintaining strong protections for sensitive patient data.

Confidentiality Coalition letter to House Homeland Security Committee on ransomware hearing

The Healthcare Leadership Council (HLC) and the Confidentiality Coalition submitted this letter to ASTP/ONC regarding the proposed HTI-5 rule. The letter recommends changes to the rule that support health data sharing and innovation while preserving strong patient privacy and confidentiality protections. Overall, it urges regulators to modernize health IT policies without weakening safeguards for sensitive health informaiton.

HLC and Confidentiality Coalition comments to CMS on the NPRM entitled, “HIPAA Security Rule to Strengthen the Cybersecurity Protected Health Information

The Healthcare Leadership Council (HLC) and the Confidentiality Coalition support strengthening cybersecurity for electronic protected health information (ePHI) but argue that the proposed HIPAA Security Rule changes are overly prescriptive, unrealistic, and burdensome. They urge the Office for Civil Rights (OCR) to maintain a risk-based approach and significantly revise several provisions.

Confidentiality Coalition response to the Federal Communications Commission on their proposal to update data breach reporting requirements.

In this letter to the FCC, the Confidentiality Coalition asks the agency to coordinate its data breach reporting rules with HHS, CISA, the FTC, and state laws so an incident only has to be reported to one federal agency. It points out that healthcare already faces heavy breach reporting requirements and is a frequent target of ransomware.

Confidentiality Coalition comments in advance of the House E&C Subcommittee on Consumer Protection & Commerce hearing on, “Promoting U.S. Innovation and Individual Liberty through a National Standard for Data Privacy.”

In this letter to the House Energy and Commerce leaders, the Confidentiality Coalition supports a national data privacy standard and the American Data Privacy and Protection Act. It urges that health data outside HIPAA get HIPAA-aligned protections, including individual authorization and limits on secondary use.

Confidentiality Coalition letter to Cybersecurity and Infrastructure Security Agency (CISA) on breach reporting request for information

In this letter to CISA, the Confidentiality Coalition responds to the agency’s request for information on implementing CIRCIA’s cyber incident reporting rules. It asks CISA to align reporting with HHS, the FTC, and state laws so an incident is reported to only one federal agency, and to allow reporting delays when a company is working with law enforcement.