HIPAA requires all business associates involved with handling protected health information (PHI) to perform and document a security risk assessment, set up essential safeguards, execute written agreements, and report security incidents. Any entity violating HIPAA can be fined from $127 to over $1.9 million per violation. To avoid penalties, entities may opt not to become a business associate or execute business associate agreements (BAAs). Those which do not create or handle PHI and those performing management functions can decline BAAs.
Browser Extensions Are the New AI Consumption Channel That No One Is Talking About
While much of the discussion on AI security centers around protecting ‘shadow’ AI and GenAI consumption, there’s a wide-open window nobody’s guarding: AI browser extensions. A new report from
