New HHS privacy guidelines

Sanction guidelines for privacy and security breaches.

For privacy and security professionals following the news, the incidents reveal a wide span of provider philosophy and response regarding breaches. Facilities demonstrate varied degrees of access control management, differing stringency of enforcement policy, and inconsistent application of employee sanctions. Sanctions have ranged from gentle reminders to unspecified disciplinary action to ter...

HHS/CDC Legal Response to SARS Outbreak

Before the severe acute respiratory syndrome (SARS) outbreak, the Centers for Disease Control and Prevention's (CDC) legal authority to apprehend, detain, or conditionally release persons was limited to seven listed diseases, not including SARS, and could only be changed using a two-step process: 1) executive order of the President of the United States on recommendation by the Secretary, U.S. D...

The New Privacy

Are Guidelines and Standards for Web Usability Comprehensive?

A previous paper compared the 110 guidelines in ISO CD 9241-151 with the 187 guidelines produced by the U.S. Department of Health and Human Services (HHS) and found that 76% of the HHS guidelines and 54% of the ISO guidelines were unique. New versions of both the original 2004 documents were issued in 2006, but 71% of the HHS guidelines and 46% of the ISO guidelines are still unique. Neither se...

Part 36—indemnification of Hhs Employees

(1) A new precedent or a new point of law is involved; or (2) A question of policy is or may be involved; or (3) The United States is or may be entitled to indemnity or contribution from a third party and the Department is unable to adjust the third party claim; or (4) The compromise of a particular claim, as a practical matter, will or may control the disposition of a related claim in which th...