Tech & Sourcing @ Morgan Lewis

The US Cybersecurity and Infrastructure Security Agency (CISA) has recently released draft rules that are set to reshape how critical infrastructure companies report cyberattacks to the US government. The rules are designed to improve the country's cybersecurity by making sure cyber incidents are reported quickly and thoroughly. This could help create a clearer understanding of cyber threats and may mitigate against future cyberattacks.

Please join us on Thursday, October 27, 2022, at 3:00 pm ET as Morgan Lewis partner Jacob Harper and associates Tesch Leigh West and Sydney Swanson discuss the importance of managing and protecting healthcare data while controlling costs and coordinating care. Topics will include the different types of data sharing agreements and implications of HIPAA and the Anti-Kickback Statute.

Emily Lowe and Ben Klaber recently presented a webinar on key contracting considerations in life sciences supply chain and manufacturing transactions as part of Morgan Lewis’ ongoing Digital Disruption and Innovation webinar series.

The Morgan Lewis M&A Academy continues on February 22 with the next presentation in “Track 2 | Getting the Deal Done – Specialists Matter” regarding key issues and considerations when companies are buying or selling technology assets. As technology and sourcing professionals, it is important to stay up to date on M&A market trends and deal issues relating to technology transfers.

As we start 2022, as part of our Spotlight series, we connect with Reece Hirsch, the co-head of Morgan Lewis’s privacy and cybersecurity practice, to discuss the recent policy statement issued by the US Federal Trade Commission regarding the Health Breach Notification Rule and how it applies to health app developers that handle consumers’ sensitive health information. Our Tech & Sourcing @ Morgan Lewis blog also published a summary of the policy statement.

According to recent guidance from the US Federal Trade Commission (FTC), providers of health apps and connected devices that collect consumers’ health information must comply with the FTC’s Health Breach Notification Rule, 16 CFR Part 318, and therefore are required to notify consumers and others when their health data is breached.

As the availability and variety of digital health tools continue to increase, evidence is also being presented that those tools are having a meaningful impact on health outcomes. A recent report, Digital Health Trends 2021: Innovation, Evidence, Regulation, and Adoption, offered by the IQVIA Institute for Human Data Science, looks at the proliferation of digital health tools, recent innovations in the market, and contributions and barriers to their adoption.

Please join us for a two-part webinar series on key legal, employment, and regulatory trends and issues impacting the European life sciences market.

Companies developing digital therapeutics, clinical decision support apps, and other digital health technologies for use in the coronavirus (COVID-19) pandemic should be mindful of FDA’s quickly evolving policies and guidance affecting such technologies. In our recent LawFlash, FDA Regulation of COVID-19 Apps, Digital Therapeutics, and other Digital Health Technologies, we examine recent FDA developments and their implications for companies in the digital health space.

The German Federal Office for Information Security (BSI) has determined the suitability of an industry-specific security standard (B3S) with which hospitals can align their IT security measures. The B3S standard was developed by the German Hospital Association (DKG).