AI Tools and HIPAA: OCR’s Expectations for BAAs, Risk Analysis, and Shadow AI
OCR says AI vendors that handle PHI are business associates. What that means for BAAs, risk analysis, vendor data sharing, and shadow AI.
Read MoreInformation Security
Ohio HB 96, One Year Later: What Local Governments Must Have in Place Now
One year ago today, on September 30, 2025, Ohio’s new cybersecurity requirements for local governments took effect. Every county, city, township and other political subdivision is now required to have a formal cybersecurity program, and the deadlines to adopt... Read MoreNYDFS Part 500: The Final Requirements Are Now in Effect
As of November 1, 2025, the last phase of the amended NYDFS cybersecurity regulation is in force, including MFA for all users and a detailed asset inventory. Here is what covered entities need to have in place.
Read MoreDOL Cybersecurity Guidance Now Covers Health and Welfare Plans: What TPAs and Plan Sponsors Should Do
The Department of Labor confirmed its cybersecurity guidance applies to all ERISA plans, not just retirement plans. Here is what that means for plan sponsors, TPAs, and other service providers.
Read More
2022-2023 Privacy and CyberSecurity Trends and Updates
Now is a good time to review 2022-2023 privacy and cyberSecurity trends and updates? A number of regulations and security concerns are on the table for this year and trending into next year. Ransomware continues to be the major concern for HIPAA-regulated entities. Eagle reviews and recommends solutions you can implement now.
Read More