Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
AI Tools and HIPAA: OCR’s Expectations for BAAs, Risk Analysis, and Shadow AI
OCR says AI vendors that handle PHI are business associates. What that means for BAAs, risk analysis, vendor data sharing, and shadow AI.
Ohio HB 96, One Year Later: What Local Governments Must Have in Place Now
One year ago today, on September 30, 2025, Ohio’s new cybersecurity requirements for local governments took effect. Every county, city, township and other...
The HIPAA Security Rule Update: Where It Stands in 2026 and What to Do Now
HHS proposed the biggest overhaul of the HIPAA Security Rule in 20 years, but the final rule has slipped to 2027. Here is what was proposed and why you should not wait to prepare.
NYDFS Part 500: The Final Requirements Are Now in Effect
As of November 1, 2025, the last phase of the amended NYDFS cybersecurity regulation is in force, including MFA for all users and a detailed asset inventory. Here is what covered entities need to have in place.
Ohio House Bill 96: New Cybersecurity Requirements for Ohio Local Governments
Ohio’s budget bill created ORC 9.64, requiring counties, cities, townships, school districts, and other political subdivisions to adopt a cybersecurity program, report incidents, and get formal approval before paying a ransom.
OCR’s Risk Analysis Initiative: Why the HIPAA Risk Analysis Is Driving 2025 Enforcement
HHS OCR keeps settling HIPAA cases over the same failure: no accurate, thorough risk analysis. Here is what regulators are looking for and how to make sure yours holds up.
DOL Cybersecurity Guidance Now Covers Health and Welfare Plans: What TPAs and Plan Sponsors Should Do
The Department of Labor confirmed its cybersecurity guidance applies to all ERISA plans, not just retirement plans. Here is what that means for plan sponsors, TPAs, and other service providers.
Ransomware Protection for DD Boards – Robust Backup and Recovery Capability
Superintendents and other organizational leadership might wonder why county and city government, including agencies right here in Ohio, continue to be hit with...
Ohio Senate Bill 29 Impacts DD Boards with Schools
Ohio Senate Bill 29 (SB29) went into effect last month on October 24, 2024. The focus of this bill is to improve student data privacy and school cybersecurity. The...
Top 4 Actionable Security Items for Health Tech Businesses
Health IT vendors need to ensure security of their applications. Conventional wisdom for health IT vendors says to begin with the HIPAA Security Regulations, which...
2022-2023 Privacy and CyberSecurity Trends and Updates
Now is a good time to review 2022-2023 privacy and cyberSecurity trends and updates? A number of regulations and security concerns are on the table for this year and trending into next year. Ransomware continues to be the major concern for HIPAA-regulated entities. Eagle reviews and recommends solutions you can implement now.
Do I Need a Data Backup Strategy for Office 365?
Are you prepared with a data backup strategy for Office 365? Eagle helps you with security, access and control of your data residing in Office 365.
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation