Resources

Client Alerts, News Articles, Blog Posts, & Multimedia

Everything you need to know about BMD and the industry.

CLIENT ALERT: Ohio Incentivizes Cybersecurity Measures

Client Alert
November 15, 2018

On November 2, 2018, Ohio’s Data Protection Act (“DPA”) went into effect.  The DPA incentivizes Ohio businesses to proactively address cybersecurity and data protection by providing an affirmative defense/safe harbor for claims related to data breach. However, the safe harbor is only applicable if the organization can prove “reasonable compliance” to the DPA.

Brennan Manna Diamond (“BMD”) can assist your business by creating written policies that demonstrate compliance with Ohio law in the spirit of the DPA.  Additionally, BMD can educate your organization as to implementing and adhering to those policies.

The DPA is the culmination of Ohio’s efforts to foster a legal, technical, and collaborative cybersecurity environment to help businesses thrive. The only way to reap this benefit is to meet its requirements.

How to Comply

Any organization maintaining personal information of Ohio residents can be subject to Ohio’s breach notification laws and potential civil liability for data breach compromising such information.  The DPA rewards proactivity vs. reactivity by incentivizing businesses to implement policies and procedures to protect the security and confidentiality of personal/restricted information, protect against any anticipated threats or hazards to the security or integrity of the personal/restricted information and protect against unauthorized access of information that is likely to result in a material risk of identity theft or other fraud. Businesses should take the following steps:

  • Businesses must determine “reasonable” security measures. Such analysis must consider:
    •  The size of the business;
    • The nature, sensitivity and use of information;
    • The resources available to the business; and
    • The cost to implement and maintain the reasonable security measures to protect against a breach of security relative to the business’ resources.
  • Businesses must implement a cybersecurity framework and the DPA recognizes certain existing frameworks of which businesses can utilize in order to qualify for safe harbor. These include:
    • Industry recognized cybersecurity frameworks, (i.e., those recommended by administrative bodies, like the National Institute of Standards and Technology (NIST);
    • Regulatory frameworks required by federal or state law (i.e., HIPAA, Gramm-Leach-Bliley); or
    • A framework that combines the payment card industry (PCI) data security standard with a current version of an applicable industry recognized cybersecurity framework.
  • Businesses must create and maintain written cybersecurity policies and procedures. Such policies and procedures must contain administrative, technical, and physical safeguards for the protection of personal/restricted information.
  • Businesses must periodically review changes in regulations and framework updates and must likewise update its cybersecurity program.

BMD's Solution

In addition to implementing industry standard cybersecurity frameworks, prudent businesses will create and maintain written policies as it relates to cybersecurity and data protection. BMD can assist in crafting the policies and identifying proper security frameworks so that your business qualifies for the safe harbor. The Ohio legislature was mindful not to be hyper-technical with the regulations so that businesses can still qualify for the safe harbor by demonstrating reasonable efforts to comply. BMD can help navigate these regulations.

In today’s ever-changing cybersecurity landscape, data breaches are at times, inevitable. BMD can also provide post-breach solutions including meeting applicable reporting requirements and litigation defense. As now enacted by Ohio, perhaps the best defense involves proactively investing in front end compliance.

For more information, please contact Brandon T. Pauley. 

Cybersecurity
Client Alert

Florida's Recent Ruling on Arbitration Clauses

March 15, 2024Florida’s recent ruling on arbitration clauses provides a crucial distinction in determining whether such clauses are void as against public policy and providers may have the opportunity to include arbitration clauses in their patient consent forms. On March 6, 2024, Florida’s Fourth District Court of Appeals reversed and remanded Florida’s Fifteenth Circuit Court ruling of Piero Palacios v. Sharnice Lawson. The Court of Appeals ruled that the parties’ arbitration agreement did not contradict the Legislature’s intent of Florida’s Medical Malpractice Act (the “MMA”), but rather reflects the parties’ choice to arbitrate claims entirely outside of the MMA’s framework. Therefore, the Court found that the agreement was not void as against public policy.Client Alert

Corporate Transparency Act Update 3/14/24

March 14, 2024On March 1, 2024, a federal district court in the Northern District of Alabama concluded that the Corporate Transparency Act (“CTA”) exceeded Congressional powers and enjoined the Department of the Treasury from enforcing the CTA against the plaintiffs. National Small Business United v. Yellen, No. 5:22-cv-01448 (N.D. Ala.). On March 11, 2024, the U.S. Department of Justice appealed the district court’s decision to the Eleventh Circuit Court of Appeals.Client Alert

The Ohio State University Launches Its Accelerated Bachelor of Science in Nursing Program

February 27, 2024In response to Ohio’s nursing shortage, The Ohio State University College of Nursing is accepting applications for its new Accelerated Bachelor of Science in Nursing program (aBSN). Created for students with a bachelor’s degree in non-nursing fields, the aBSN allows such students to obtain their nursing degree within 18 months. All aBSN students will participate in high-quality coursework and gain valuable clinical experience. Upon completion of the program, graduates will be eligible to take the State Board, National Council of Licensure Exam for Registered Nursing (NCLEX-RN).Client Alert

Another Transparency Obligation: The FinCEN Beneficial Ownership Information Reporting Requirements

February 26, 2024Many physician practices and healthcare businesses are facing a new set of federal transparency requirements that require action now. The U.S. Department of Treasury Financial Crimes Enforcement Network (“FinCEN”) Beneficial Ownership Information Reporting Requirements (the “Rule”), which was promulgated pursuant to the 2021 bipartisan Corporate Transparency Act, is intended to help curb illegal finance and other impermissible activity in the United States.Client Alert

“In for a Penny, in for a Pound” is No Longer the Case for Florida Lawyers

February 19, 2024On April 1, 2024, newly adopted Rule 1.041 to the Florida Rules of Civil Procedures goes into effect which creates a procedure for an attorney to appear in a limited manner in civil proceedings.  Currently, when a Florida attorney appears in a civil proceeding, he or she is reasonable for handling all aspects of the case for their client.  This new rule authorizes an attorney to file a notice limiting the attorney’s appearance to particular proceedings or specified matters prior to any appearance before the court.  For example, an attorney can now appear for the limited purpose of filing and arguing a motion to dismiss.  Once the motion to dismiss is heard by the court, the attorney may file a notice of termination of limited appearance and will have no further obligations in the case.
Older posts
Newer posts