
Legal Updates
7 min read
HIPAA Fines Hit Professional Services Firms
OCR's $175K settlement with BST & Co. CPAs shows business associates: including law firms handling PHI: face the same Security Rule risk-analysis duties as providers.
Read
5 articles with this tag

OCR's $175K settlement with BST & Co. CPAs shows business associates: including law firms handling PHI: face the same Security Rule risk-analysis duties as providers.

New York's 22 NYCRR Part 161 took effect June 1, 2026: a statewide no-disclosure default for AI use in court papers, with optional per-court certification rules.

First pegged at 25 million, the Conduent breach exposed Social Security numbers and health data of 62.2M people. A class settlement is now pending.

OCR doubled penalties, completed 50+ Right of Access actions, and launched Part 2 enforcement. What law firms need to know.

The first HIPAA Security Rule update in 13 years mandates MFA, encryption, and annual audits. What law firms must prepare now.