HHS Clarifies NPDB Reporting Obligations
Client Alert | 1 min read | 09.24.03
Some health care entities have expressed concern that the National Practitioner Data Bank regulations require health care entities to report adverse actions taken against practitioners to both the NPDB and the applicable State Board of Medical Examiners, while the NPDB Guidebook directs health care entities to report directly to the NPDB first, and then subsequently to send to the State Board the Report Verification Document that the NPDB sends to the plan confirming receipt of the adverse action report in satisfaction of the plan's Board reporting obligation. We requested confirmation of health care entity obligations from the NPDB, and received the attached letter from HRSA Deputy Administrator Cynthia Grubbs in response. The letter confirms the process set forth in the Guidebook, and should provide additional comfort to health care entities who may have been unsure of their obligations.
Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Client Alert | 10 min read | 09.11.26
Mining, Indigenous Consultation Rights, and Investment Treaty Protection
Client Alert | 2 min read | 09.11.26
New ISOO Guidance Directs Federal Agencies to Provide More CUI Guidance to Contractors
Client Alert | 4 min read | 09.10.26
European Commission Publishes Landmark Guidelines on Exclusionary Abuses by Dominant Companies
