HIPAA Omnibus Rule Reference Chart

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

Meta Platforms has agreed to pay $17 billion over ten years to resolve multistate litigation alleging the company engineered Facebook and Instagram to addict minors while concealing the risks. Beyond the historic financial penalty, the settlement mandates sweeping platform changes including default usage limits, overnight lockouts, and parental controls for users under eighteen.

On September 15, the Federal Trade Commission ("FTC") issued a policy statement ("Statement") addressing the scope of its Health Breach Notification Rule ("Rule") on health apps and connected devices.

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.

Massachusetts voters will decide nine statewide ballot questions in November 2026 that could fundamentally reshape the state's legal, regulatory, and fiscal landscape. These measures address government transparency, election reforms, housing development, marijuana regulation, firearms laws, and state revenue limits, with implications extending far beyond Election Day to implementation, regulation, and ongoing policy debates.

The Trump administration's most-favored-nation pricing initiative has expanded to include nine additional mid-sized pharmaceutical manufacturers, bringing the total coverage to 89% of the brand drug market. These new agreements focus on Medicaid pricing discounts aligned with international rates, while manufacturers commit billions to U.S. manufacturing and research in exchange for exemptions from future pricing mandates and potential tariffs.

On September 18, 2026, President Trump issued a proclamation that extends through September 21, 2027 a $100,000 fee for H-1B petitions that are filed as consular petitions or are only approvable for consular notification.

The California Legislature’s 2025–2026 session ended with workplace-related artificial intelligence or automated technology in its crosshairs. If Governor Newsom signs this suite of bills, California employers may face a number of new obligations relating to AI-driven surveillance tools, automated decision systems, and other emerging workplace technologies.

The Department of War's Office of Strategic Capital has launched a groundbreaking $500 million to $1 billion fund finance program targeting critical minerals vital to U.S. national security. How will this federal-private capital partnership reshape financing for companies addressing supply chain vulnerabilities in strategic materials?

Sources informed the Wall Street Journal that a definitive MasterCard settlement could be announced as soon as this week.

The US Department of Energy's Office of Energy Dominance Financing has unveiled its Strategic Plan for 2026-2030, marking a significant shift in federal energy financing priorities. With over $300 billion in combined loan authority across four programs, EDF aims to deploy hundreds of billions in new financing commitments while maintaining rigorous underwriting standards.

Antora Energy, a leading US thermal battery manufacturer, has secured $550 million in Series C financing to scale deployment of its innovative energy storage technology that converts low-cost electricity into heat stored in solid carbon blocks. The oversubscribed funding round will support expanded manufacturing capacity, establishment of a second US production hub, and large-scale project deployment to meet surging energy demand from industrial facilities, data centers, and the grid.

New York lawmakers have passed Senate Bill 2236-A, known as the “Wage Payment Integrity Act” (the “Act”), which would significantly expand what qualifies as protected “wages” under the New York Labor Law (“NYLL”) and would give employees enhanced tools to recover unpaid compensation.

The Federal Communications Commission has released a comprehensive proposal to transform its Robocall Mitigation Database into a more rigorous compliance regime, potentially requiring voice service providers to submit detailed ownership information, enhanced know-your-customer procedures, and strengthened traceback commitments.