Doctor Sally Sanchez specializes in surgeries that are not m…

Doctor Sally Sanchez specializes in surgeries that are not medically necessary such as face lifts. Since most of the procedures Doctor Sanchez performs would not be covered under health insurance, she only accepts credit cards for payment and does not bill insurance. Will Lee, a potential patient, looks online for a doctor to perform a facelift and finds Doctor Sanchez’s website. When Will visits Doctor Sanchez’s office, Will does not receive a privacy notice with his initial paperwork. Will asks Doctor Sanchez for a copy of the privacy notice and is told that the office does not maintain a privacy notice. Is it likely that Doctor Sanchez has violated HIPAA?

Most state data breach notification laws require affected co…

Most state data breach notification laws require affected companies to notify national CRAs of a qualifying incident “without unreasonable delay.” Which state requires companies to report to these CRAs within 48 hours – making this state reporting requirement the shortest of any state?

New Jersey’s new state comprehensive privacy law lacks a pri…

New Jersey’s new state comprehensive privacy law lacks a private right of action that would allow individuals to sue for violations of their consumer rights under the law. Which of the state comprehensive privacy laws studied in this class adopts a similar approach on this topic?

Garrett Gamer, an experienced poker player, signs up to play…

Garrett Gamer, an experienced poker player, signs up to play in a national poker tournament at Wild Cougar Casino in Las Vegas, Nevada. After arriving at the casino, Garrett decides to participate in 3 smaller tournaments in addition to the national poker tournament.  To cover the entry fees, Garrett pays the casino $20,000 in cash. Does this cash payment trigger a reporting requirement?

Virtual Armor, a company founded to assist businesses with a…

Virtual Armor, a company founded to assist businesses with addressing cybersecurity concerns, found itself the victim of a significant data breach. Fearing for the loss of trust by its customers, Virtual Armor’s top management chose to hide the evidence of the data breach. Approximately one year after the breach, the FTC informed Virtual Armor that the company and its top management were under investigation concerning the data breach. The results of the FTC investigation included both civil and criminal allegations against Virtual Armor and its top management. Which federal agency or agencies are able handle these civil and criminal allegations in court?