Friday, July 22, 2016

Silent Circle Protects Android Security

 


Brad Rostolsky is a lawyer specializing in health and privacy law at Reed Smith, a top firm with offices all over the world. In addition to memberships with the American Health Lawyers Association and the American Bar Association, Brad Rostolsky is a member of the International Association of Privacy Professionals (IAPP).

Policy-neutral IAPP is the largest information privacy organization in the world. In one of its news items on the state of privacy, the IAPP reported on a new operating system for Android phones called Silent OS 3.0. Created by an encrypted-communications firm called Silent Circle, the operating system will include a program called Privacy Meter that will scan the phone for behavior by apps that may compromise the device’s security. The program will alert the user if any browsing certificates have been changed or if the user’s location is being shared by an app. Other programs created by Silent Circle include Silent Phone and Silent Text, which encrypt communications to prevent third-party surveillance.

Tuesday, July 5, 2016

The HIPAA Breach Notification Rule


Brad Rostolsky is a proficient healthcare law attorney with a Juris Doctorate from the Duquesne University School of Law and a Master in Public Health from Emory University. A partner at the Reed Smith law firm, Brad Rostolsky is an expert on HIPAA alignment and leads the HIPAA and Health Privacy and Security group at the firm.

HIPAA, representing the Health Insurance Portability & Accountability Act, was enacted in 1996 and included new requirements related to the privacy and protection of protected health information (PHI). One current component of HIPAA is 45 CFR §§ 164.400-414, the HIPAA breach notification rule, which requires organizations that handle PHI to provide notification in the event of a data breach.

A HIPAA data breach is defined as impermissible disclosure of unencrypted PHI. Once a breach occurs, an organization may need to notify several layers of affected parties. These layers include all individuals affected by the data that was disclosed, prominent news and media outlets in the area, and the secretary of the federal Department of Health and Human Services via a web based breach reporting form. For additional information on HIPAA policy, visit www.hhs.gov/hipaa.