Posts from January 2026.
By February 16, 2026, HIPAA covered entities receiving substance use disorder (SUD) records from a Part 2 program must revise their Notice of Privacy Practices to comply with a 2024 HHS Final Rule.
Kentucky and Indiana implemented new consumer data privacy laws, the KCDPA and ICDPA, effective January 1, 2026. Both laws impose requirements on businesses handling personal data and grant rights to consumers. Compliance is essential to avoid penalties, and businesses should review the guidance from the respective state Attorney Generals ...