As US companies continue to spend time and effort complying and responding to all of the new privacy laws and regulations both in the United States and aboard (i.e. GDPR and California Consumer Privacy Act of 2018) companies cannot forget the basics. If you represent something in your Privacy Policy it better be accurate, up to date, and not misleading!
On July 2, 2018, the Federal Trade Commission (FTC) issued a number of press releases and a proposed settlement with California-based employee training company ReadyTech Corporation. In announcing the settlement, FTC Chairman Joe Simons said, “Today’s settlement demonstrates the FTC’s continuing commitment to vigorous enforcement of the Privacy Shield.” According to the FTC, this is the 4th case enforcing the Privacy Shield and 47th case enforcing international privacy frameworks such as the Safe Harbor framework and the Asia Pacific Economic Cooperation Cross Border Privacy Rules.
The ReadyTech settlement should be a warning for other companies that make representations in their Privacy Policies about the Privacy Shield, GDPR, CCPA and other data security and privacy frameworks. By way of background, the Privacy Shield framework allows companies to transfer personal data lawfully from the EU to the United States. To join the Privacy Shield framework, a company must self-certify to the U.S. Department of Commerce that it complies with the Privacy Shield Principles and related requirements that have been deemed to meet the EU’s adequacy standard. A company, like ReadyTech, that claims it has self-certified to the Privacy Shield Principles, but failed to self-certify to the U.S. Department of Commerce, may be subject to an enforcement action by the FTC. Continue reading…
On June 22, 2018 Governor Wolf signed 
A home health agency has scored a second win in its fight to prevent CMS from withholding Medicare payments (to effectuate a recoupment of alleged overpayments), at least for the time being. We previously 
The Fifth Circuit has recently held that its courts have jurisdiction to hear a lawsuit seeking to enjoin Medicare from recouping funds until after a hearing because (1) the provider’s claim is collateral to the underlying recoupment and (2) the recoupment may result in the provider’s bankruptcy and in a disruption to its patients.
The recent Medicare Payment Advisory Commission (“MedPAC” or “Commission”) 
Bergen County Superior Court Judge Robert Contillo issued a recent decision deemed favorable by Horizon Healthcare Services Inc. (“Horizon”) in a case involving three healthcare providers (“Providers”) that challenged Horizon’s newer tiered health coverage plan for hospitals: OMNIA. The Providers alleged that Horizon unfairly designated them as Tier 2 Providers, a tier in which OMNIA Members access providers while incurring higher out-of-pocket costs than they would when accessing those providers in Tier 1. Although certain other claims may proceed, Judge Contillo dismissed the breach of contract claim because he determined that Horizon did not breach the network hospital agreements by “failing to include [the Providers] in Tier 1” because “[t]he plain and unambiguous language [under the agreement] does not guarantee that [the Providers] be included in Horizon’s new products, networks or subnetworks.”
Each year, 
As a first in the history of the Medicaid program, the Centers for Medicare & Medicaid Services (CMS)