Amy Leopard
Nashville
Nashville health lawyer @BradleyLegal, health iT nerd, Americana music lover, aka Mamy, WDE
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Amy Leopard
Data Breach Incident Response Seminar
Register Tuesday, February 24, 2026 7:30 AM-9:30 AM CST Join Bradley's interactive seminar in our Atlanta office on Tuesday, February 24, 2026 to navigate the complexities of data breach response. This comprehensive seminar will provide in-depth insights from top legal professionals at Bradley and special guest Tony DeSarro of KPMG. Pending bar approval, attendees can earn up to 2 hours of CLE credit for participating.
Global AI Governance: Five Key Frameworks Explained | JD Supra
August 15, 2025 To embed, copy and paste the code into your website or blog: With generative artificial intelligence (AI) technologies entering nearly every aspect of human life, it has become ever more urgent for organizations to develop AI systems that are trustworthy and subject to good governance. To that end, various international organizations and technical bodies have established standards for responsible AI development and deployment.
Global AI Governance: Five Key Frameworks Explained
The AI Journal With generative artificial intelligence (AI) technologies entering nearly every aspect of human life, it has become ever more urgent for organizations to develop AI systems that are trustworthy and subject to good governance. To that end, various international organizations and technical bodies have established standards for responsible AI development and deployment.
Tennessee Data Privacy Law (TIPA) Effective July 1: Are You Prepared?
July 1 marked the official enforcement date of the Tennessee Information Protection Act (TIPA), the state’s comprehensive consumer privacy law. Signed into law in 2023, TIPA grants consumers specific rights concerning their personal information and regulates covered businesses and service providers that collect, use, share, or otherwise process consumers’ personal information.
Colorado’s Artificial Intelligence Act (CAIA) Updates: A Summary of CAIA’s Consumer Protections When Interacting with Artificial Intelligence Systems | JD Supra
During the 2024 legislative session, the Colorado General Assembly passed Senate Bill 24-205, which is known as the Colorado Artificial Intelligence Act (CAIA). This law will take effect on February 1, 2026, and requires developers and deployers of a high-risk AI system to protect Colorado residents (“consumers”) from risks of algorithmic discrimination. Notably, the Act also requires that developers or deployers must disclose to consumers that they are interacting with an AI system. Colorado Gov.
Artificial Intelligence Insurance Enters Market-New Coverage for
It was only a matter of time before new insurance coverages targeting the risks posed by artificial intelligence (AI) would hit the market. That time is now. As the use of AI continues to proliferate, so too does our understanding of the risks presented by this broad and powerful technology. Some risks appear novel in form while others mirror traditional exposures that have long been viewed as insurable causes of loss.
Enhancing Cyber Resilience in Healthcare Systems
HIMMS Tennessee Chapter Summit 25 Register Thursday, May 01, 2025 11:35 AM-12:15 PM CST Franklin Marriott Cool Springs Franklin, TN Healthcare systems become increasingly digitized, the imperative to safeguard against cyber threats intensifies. This panel will explore the current cybersecurity challenges facing healthcare organizations, including the vulnerabilities in interconnected systems and the rise of sophisticated cyberattacks.
Top 10 takeaways from the new HIPAA security rule NPRM | JD Supra
The NPRM would require more-formalized written security incident response plans and procedures, documenting how workforce members are to report suspected or known security incidents, as well as how the regulated entity should identify, mitigate, remediate, and eradicate any suspected or known security incidents. Incident response plans must be reviewed and tested at least once every 12 months and modified thereafter as reasonable and appropriate. 7.
Top 10 takeaways from the new HIPAA security rule NPRM
Thomson Reuters On Jan. 6, 2025, the U.S. Department of Health and Human Services (HHS) proposed new regulations to enhance cybersecurity protections for electronic protected health information (ePHI) under the Health Insurance Portability and Accountability Act (HIPAA). This Notice of Proposed Rulemaking, opens new tab (NPRM) marks the first significant update since the HIPAA Security Rule's original publication in 2003 and its last revision in 2013.
AI Meets HIPAA Security: Understanding HHS’s Risk Strategies and Proposed Changes | JD Supra
In this final blog post in the Bradley series on the HIPAA Security Rule notice of proposed rulemaking (NPRM), we examine how the U.S. Department of Health and Human Services (HHS) Office for Civil Rights interprets the application of the HIPAA Security Rule to artificial intelligence (AI) and other emerging technologies. While the HIPAA Security Rule has traditionally been technology agnostic, HHS explicitly addresses security measures for these evolving technology advances.
AI Meets HIPAA Security: Understanding HHS’s Risk Strategies and Proposed Changes
In this final blog post in the Bradley series on the HIPAA Security Rule notice of proposed rulemaking (NPRM), we examine how the U.S. Department of Health and Human Services (HHS) Office for Civil Rights interprets the application of the HIPAA Security Rule to artificial intelligence (AI) and other emerging technologies. While the HIPAA Security Rule has traditionally been technology agnostic, HHS explicitly addresses security measures for these evolving technology advances.
AI Meets HIPAA Security: Understanding HHS’s Risk Strategies and Proposed Changes
In this final blog post in the Bradley series on the HIPAA Security Rule notice of proposed rulemaking (NPRM), we examine how the U.S. Department of Health and Human Services (HHS) Office for Civil Rights interprets the application of the HIPAA Security Rule to artificial intelligence (AI) and other emerging technologies. While the HIPAA Security Rule has traditionally been technology agnostic, HHS explicitly addresses security measures for these evolving technology advances.
The Why Behind the HHS Proposed Security Rule Updates | JD Supra
In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking (NPRM), we are exploring the justifications for the proposed updates to the Security Rule. Last week’s post on the updates related to Vulnerability Management, Incident Response & Contingency Plans can be found here.
In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking (NPRM), we are exploring the justifications for the proposed updates to the Security Rule. Last week’s post on the updates related to Vulnerability Management, Incident Response & Contingency Plans can be found here.
The Why Behind the HHS Proposed Security Rule Updates
Skip to main content February 27, 2025 Volume XV, Number 58 Legal Analysis. Expertly Written. Quickly Found.
The Why Behind the HHS Proposed Security Rule Updates
In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking (NPRM), we are exploring the justifications for the proposed updates to the Security Rule. Last week’s post on the updates related to Vulnerability Management, Incident Response & Contingency Plans can be found here.
HIPAA Security Rule Updates: New Business for Business Associates | JD Supra
Bradley has launched a multipart blog series on the U.S. Department of Health and Human Services’ (HHS) proposed changes to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule, beginning last week with an overview. The Notice of Proposed Rulemaking (NPRM) published on January 6, 2025. This marks the first update since the HIPAA Security Rule’s original publication in 2003 and its last revision in 2013.
Vimeo’s Fleeting Interaction With Videos Doesn’t Negate Safe Harbor Protections
The US Court of Appeals for the Second Circuit affirmed a district court’s decision, granting Vimeo qualified protection under the Digital Millennium Copyright Act (DMCA) safe harbor provision. Capitol Records, LLC v. Vimeo, Inc., Case Nos. 21-2949(L); -2974(Con) (2d Cir. Jan. 13, 2025) (Leval, Parker, Merriam, JJ.) This case addresses, for the second time, whether Vimeo had “red flag knowledge” of the defendant’s copyrighted works under the DMCA.
EU Council Adopts European Health Data Space Regulation
Skip to main content January 23, 2025 Volume XV, Number 23 Legal Analysis. Expertly Written. Quickly Found. Trending News EU Council Adopts European Health Data Space Regulation Print Mail Download />i Facebook Twitter Linkedin Pinterest Reddit Facebook Messenger Email Digg Print X Buffer Flipboard On January 21, 2025, the Council of the EU adopted the European Health Data Space Regulation (the “EHDS Regulation”).
Federal Circuit Reverses Ruling of Invalidity for Lack of Written
The US Court of Appeals for the Federal Circuit reversed a district court’s ruling of invalidity for lack of written description, finding that the district court erred in its analysis of written description because patents must be evaluated based on the claims themselves, not on their construction. In re Entresto, Case No. 23-2218 (Fed. Cir. Jan.
HIPAA Security Rule Updates: New Business for Business Associates
Bradley has launched a multipart blog series on the U.S. Department of Health and Human Services’ (HHS) proposed changes to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule, beginning last week with an overview. The Notice of Proposed Rulemaking (NPRM) published on January 6, 2025. This marks the first update since the HIPAA Security Rule’s original publication in 2003 and its last revision in 2013.
Introducing Bradley’s Series on HHS’s Proposed HIPAA Security Rule Updates | JD Supra
Bradley is launching a multipart blog series on the U.S. Department of Health and Human Services’ (HHS) proposed changes to strengthen cybersecurity protections for electronic protected health information (ePHI) regulated under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The Notice of Proposed Rulemaking (NPRM) was published on January 6, 2025 and applies to covered entities and their business associates under HIPAA.
HHS Develops Strategy to Improve Security in the Healthcare Sector | JD Supra
The Department of Health & Human Services (HHS) released a concept paper outlining its strategy for improving cybersecurity infrastructure within the healthcare sector. The paper calls for proposing healthcare-specific cybersecurity performance goals that will include both minimum foundational practices and advanced goals for cybersecurity performance.
HHS Develops Strategy to Improve Security in the Healthcare Sector
The Department of Health & Human Services (HHS) released a concept paper outlining its strategy for improving cybersecurity infrastructure within the healthcare sector. The paper calls for proposing healthcare-specific cybersecurity performance goals that will include both minimum foundational practices and advanced goals for cybersecurity performance.
U.S. Senate Judiciary Committee Holds Historic Hearing on AI Regulation | JD Supra
On May 16, 2023, the U.S. Senate Judiciary Committee conducted a significant oversight hearing on the regulation of artificial intelligence (AI) technology, specifically focusing on newer models of generative AI that create new content from large datasets. The hearing was chaired by Sen. Richard Blumenthal for the Subcommittee on Privacy, Technology, and the Law.
U.S. Senate Judiciary Committee Holds Historic Hearing on AI Regulation
On May 16, 2023, the U.S. Senate Judiciary Committee conducted a significant oversight hearing on the regulation of artificial intelligence (AI) technology, specifically focusing on newer models of generative AI that create new content from large datasets. The hearing was chaired by Sen. Richard Blumenthal for the Subcommittee on Privacy, Technology, and the Law.
Offshoring of Certain Patient Data Banned in New Florida Law
Effective July 1, 2023, a new Florida law will limit certain healthcare providers from storing patient information offshore. CS/CS/SB 264 (Chapter 2023-33, Laws of Florida), amends the Florida Electronic Health Records Exchange Act to require healthcare providers who use certified electronic health record technology to ensure that patient information is physically maintained in the continental United States or its territories or Canada.
Florida Law Requires Patient Health Care Info be Stored in US and Canada
Legal Disclaimer You are responsible for reading, understanding and agreeing to the National Law Review's (NLR’s) and the National Law Forum LLC's Terms of Use and Privacy Policy before using the National Law Review website. The National Law Review is a free to use, no-log in database of legal and business articles. The content and links on www.NatLawReview.com are intended for general information purposes only.
U.S. Senate Judiciary Committee Holds Historic Hearing on AI Regulation
On May 16, 2023, the U.S. Senate Judiciary Committee conducted a significant oversight hearing on the regulation of artificial intelligence (AI) technology, specifically focusing on newer models of generative AI that create new content from large datasets. The hearing was chaired by Sen. Richard Blumenthal for the Subcommittee on Privacy, Technology, and the Law.
New Florida Law Will Ban Offshoring of Certain Patient Data | JD Supra
Effective July 1, 2023, a new Florida law will limit certain health care providers from storing patient information offshore. CS/CS/SB 264 (Chapter 2023-33, Laws of Florida), amends the Florida Electronic Health Records Exchange Act to require health care providers who use certified electronic health record technology to ensure that patient information is physically maintained in the continental United States or its territories or Canada.
New Florida Law Will Ban Offshoring of Certain Patient Data
Effective July 1, 2023, a new Florida law will limit certain health care providers from storing patient information offshore. CS/CS/SB 264 (Chapter 2023-33, Laws of Florida), amends the Florida Electronic Health Records Exchange Act to require health care providers who use certified electronic health record technology to ensure that patient information is physically maintained in the continental United States or its territories or Canada.
New Florida Law Will Ban Offshoring of Certain Patient Data
Effective July 1, 2023, a new Florida law will limit certain health care providers from storing patient information offshore. CS/CS/SB 264 (Chapter 2023-33, Laws of Florida), amends the Florida Electronic Health Records Exchange Act to require health care providers who use certified electronic health record technology to ensure that patient information is physically maintained in the continental United States or its territories or Canada.
Accountable AI Systems through Risk Management: NIST Creates Inaugural Framework with Principles and Playbook
On January 26, 2023, the U.S. National Institute of Standards and Technology (NIST) released the Artificial Intelligence (AI) Risk Management Framework (AI Risk Management Framework 1.0), a voluntary guidance document for managing and mitigating the risks of designing, developing, deploying, and using AI products and services.
NIST Releases the AI Risk Management Framework
On January 26, 2023, the U.S. National Institute of Standards and Technology (NIST) released the Artificial Intelligence (AI) Risk Management Framework (AI Risk Management Framework 1.0), a voluntary guidance document for managing and mitigating the risks of designing, developing, deploying, and using AI products and services.
HHS Information Blocking Rule: The 8 Exceptions
Two years ago, the U.S. Department of Health and Human Services (HHS) Office of the National Coordinator (ONC) issued regulations under the 21st Century Cures Act advancing the interoperability of electronic health information (EHI) and access to EHI by patients and interested stakeholders.
Healthcare Alert - HHS Information Blocking Rule: The 8 Exceptions | JD Supra
Two years ago, the U.S. Department of Health and Human Services (HHS) Office of the National Coordinator (ONC) issued regulations under the 21st Century Cures Act advancing the interoperability of electronic health information (EHI) and access to EHI by patients and interested stakeholders.
Alexa, Are You Allowed to Be Here? Considerations for Drafting Virtual Assistant Policies for Long Term Care Facilities | JD Supra
Virtual assistants such as Amazon’s Alexa, Facebook’s Portal, Google’s Nest Hub, and countless others continue growing in popularity as families navigate safely remaining connected with their loved ones receiving long-term care during a continuing pandemic. In some instances, use of virtual assistants has been encouraged directly by facilities hoping to improve isolation, boost morale, and promote independence. At their core, virtual assistants are passive listening and recording devices.
Information Blocking Rule Compliance Date Extended Due to Pandemic | JD Supra
The U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health Information Technology (ONC) released an interim final rule on October 29, 2020, delaying the implementation of the information blocking rule under the 21st Century Cures Act (Information Blocking Rule).
SAMHSA Finalizes Revisions to Part 2 Regulations Governing Confidentiality of Substance Use Disorder Records | JD Supra
On July 15, 2020, the Substance Abuse and Mental Health Services Administration (SAMHSA), a branch of the U.S. Department of Health and Human Services (HHS), published its much-anticipated final rule to revise 42 C.F.R. Part 2, a set of federal regulations governing the confidentiality of substance use disorder (SUD) patient records.
A Letter from the Editors
As technology and business rapidly evolve, state and federal government agencies are continually introducing new data privacy regulations that businesses need to be aware of. To address this ever-changing landscape, we are pleased to introduce our new blog—Online & On Point—to provide commentary, updates, and insight on the developments that could have an impact on businesses as they seek to remain in compliance with privacy laws, serve their customers, and to mitigate risk.
Prepare Now For Sharing of and Access to Electronic Health Information: Cures Act Information Blocking and Interoperability Rules Take Effect June 30, 2020 | Bradley Arant Boult Cummings LLP - JDSupra
The U.S. Department of Health and Human Services (HHS) issued companion regulations advancing the interoperability of and patient access to electronic health information under the 21st Century Cures Act that will take effect June 30, 2020, with a compliance date of November 2, 2020. Now is the time to learn what the Information Blocking Rule will require and begin the work with stakeholders to establish new practices for advancing interoperability goals safely and securely.
Privacy Crisis: Does Personal Privacy Matter During a Pandemic? | JD Supra
Updated: May 25, 2018: JD Supra is a legal publishing service that connects experts and their content with broader audiences of professionals, journalists and associations.
OCR Breach Reporting: 2019 “Small Breach” Report Due Saturday, February 29 - Healthcare Alert | JD Supra
Updated: May 25, 2018: JD Supra is a legal publishing service that connects experts and their content with broader audiences of professionals, journalists and associations.
HHS Proposes Revisions to Part 2 Regulations Governing Confidentiality of Substance Use Disorder Records - Healthcare Alert | JD Supra
Updated: May 25, 2018: JD Supra is a legal publishing service that connects experts and their content with broader audiences of professionals, journalists and associations.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Amy
Contact Amy, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack