Blog

Criminal enforcement actions can result in imprisonment or criminal fines. Which federal agency or agencies are able to bring criminal enforcement actions?

DocSky is a company dedicated to storing individual health records for doctors around the U.S. DocSky only provides these cloud services for doctors who are not defined as covered entities. In December, DocSky suffers a hack. Is DocSky required to report the data breach pursuant to the requirements of HIPAA and HITECH?

Following a number of major data breaches over the last year, your employer is looking to increase trust in their privacy practices with online consumers. They should:

A non-profit group named Profiles Are Invasive (PAI) advocates for restricting companies’ ability to collect information on consumers when this data is used to create profiles based on consumer preferences, behavior, and attitudes. A team of PAI volunteers researched the status of the law in the U.S. Their report concluded:

Doctor Barnaby Boston specializes in surgeries that are not medically necessary such as face lifts. Since most of the procedures Doctor Boston performs would not be covered under insurance, he only accepts credit cards for payment and does not bill insurance. Charlie Cheery, a potential patient, looks online for a doctor to perform a facelift and finds Doctor Boston’s website. When Charlie visits Doctor Boston’s office, Charlie does not receive a privacy notice with his initial paperwork. Charlie asks Doctor Boston for a copy of the privacy notice and is told that the office does not maintain a privacy notice. Is it likely that Doctor Boston has violated HIPAA?

A woman says the following illogical sentences: “The eagle takes flight at three o’clock and flies here from General Electric. I get my check from the eagle; he goes from the mailbox to make a payment. He is a secret spy for my husband and makes a shotgun sound.” Based on what she says, this woman is most likely experiencing ________ and is displaying a ________ symptom.

If the anti-depressant Prozac did not increase the activity of _____, it would not be effective in treating depression.

Many of the enforcement actions initiated by the FTC result in settlement. If a company decides not to settle the complaint by the FTC, what is the enforcement process that follows?

In 2019, the video sharing company YouTube agreed to settle allegations that the company had illegally collected personal information from children without obtaining their parent’s consent. The assertion made by the FTC is that YouTube’s behavior violated:

Terri Tourist, a resident of Fresno, California, purchased a plane ticket from Global Airlines. The flight was scheduled to leave from Fresno and arrive in Atlanta, Georgia, on December 31, 2021. Terri later decided to change the flight to the next day – January 1, 2022. When Terri contacted Global Airlines to make the adjustment to her reservation, she learned for the first time that Global Airlines used a company named QuickSeat to do the real-time seat assignments for their customers, including Terri’s seat assignment on both the December 31 and January 1 flights. Knowing that the CCPA considers of sale of personal information to include “any disclosure” of personal information to another company, Terri contacted the California Attorney General’s Office with her complaint. What defense is Global Airlines likely to assert?