
Legal Updates
7 min read
HIPAA Fines Hit Professional Services Firms
OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.
Read
5 articles with this tag

OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.

New York's 22 NYCRR Part 161 took effect June 1, 2026 — a statewide no-disclosure default for AI use in court papers, with optional per-court certification rules.

The Conduent data breach now affects 25M+ Americans — SSNs, medical records, and Medicaid data stolen across 30+ states.

OCR doubled penalties, completed 50+ Right of Access actions, and launched Part 2 enforcement. What law firms need to know.

The first HIPAA Security Rule update in 13 years mandates MFA, encryption, and annual audits. What law firms must prepare now.