The US Department of Labor (DOL) issued a press release on September 6, 2024 reminding ERISA plan fiduciaries that it considers cybersecurity to be an area of “great concern” and emphasizing that it continues to investigate potential cybersecurity-related ERISA violations. The press release accompanied guidance updating the DOL’s 2021 cybersecurity subregulatory guidance and, most significantly, clarifying that the 2024 updates apply to all types of ERISA plans, including health and welfare plans. In our view, this clarification now aligns the DOL’s cybersecurity guidance with the position it has taken in investigations and public statements.
ML BeneBits
EXAMINING A RANGE OF EMPLOYEE BENEFITS
AND EXECUTIVE COMPENSATION ISSUES
AND EXECUTIVE COMPENSATION ISSUES
The US Department of Health and Human Services, Office for Civil Rights (OCR) published its Final Rule titled HIPAA Privacy Rule to Support Reproductive Health Care Privacy in the Federal Register on April 26, 2024.