HIPAA Digest | Catapult Business Innovations – December 17, 2025

Cerebral & RAYUS Radiology Settle Pixel Lawsuits – The HIPAA Journal

Pixel-related lawsuits underscore that patient imagery and metadata (PHI in imaging) can trigger HIPAA privacy liabilities, signaling to business leaders that AI, imaging, and sharing tools must be tightly governed with encryption, access controls, and vendor risk management.

Read full article

February 16, 2026, Compliance Deadline for Part 2 Final Rule – The HIPAA Journal

This deadline-driven update signals when covered entities and business associates must have updated privacy and security programs, contracts, and risk assessments in place, making it essential for marketing and IT leaders planning HIPAA-compliant AI deployments.

Read full article

Data Breaches Announced by Victory Disability & Madison Healthcare Services – The HIPAA Journal

New breach announcements highlight ongoing risks to PHI and the potential cost of noncompliance, reinforcing the importance of encryption, access controls, and third-party risk management for any business that handles health data in AI or marketing tech.

Read full article

$3.5M Settlement Agreed to Resolve Group Health Cooperative of South Central Wisconsin Data Breach Lawsuit – The HIPAA Journal

The settlement underscores the financial exposure of PHI breaches and the importance of robust security, breach detection, and rapid incident response for any organization handling protected health information.

Read full article

Data Breaches Announced by Expert MRI; McElroy & Associates – The HIPAA Journal

Data breaches announced by Expert MRI and McElroy & Associates underscore ongoing PHI exposure risks across medical specialties, highlighting the need for robust access controls, encryption, and third-party risk management in any AI or marketing effort that handles PHI.

Read full article