Layna Cook Rush

The U.S. Departments of Health and Human Services, Labor, and Treasury (the "Departments") and the Office of Personnel Management released a Final Rule on May 28, 2026, significantly restructuring the Federal Independent...more Education institutions using the Canvas learning management system (LMS), operated by Instructure, may be impacted by a recently disclosed cybersecurity incident involving unauthorized access to customer-associated data. The...more Introduction and Summary - HHS issued a final rule modernizing 42 CFR Part 2 to implement the CARES Act and more closely align with HIPAA's Privacy, Breach Notification, and Enforcement frameworks. The rule permits a single,...more The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently released its January 2026 Cybersecurity Newsletter, focusing on system hardening and security baselines as critical components of...more