TQ 2.1: Why is the U.S. cybersecurity law landscape often described as a "patchwork of sectoral laws"? What are the implications for companies?

TQ 2.2: What industry sectors or types of business practices are likely to be subject to cybersecurity regulations?

TQ 2.3: Whom does the Health Insurance Portability and Accountability Act regulate? What are some situations in which information related to health is not regulated by HIPAA?

TQ 2.4: When does the privacy rule require the patient's authorization before protected-health information can be used or shared? What are some examples of situations where an authorization is not required?

TQ 2.5: What categories of safeguards does the HIPAA security rule require for protected health information? Provide a few examples in each category.'

1. Stephen P. Mulligan and Chris D. Linebaugh, "Data Protection Law: An Overview," Congressional Research Service, R45631, March 25, 2019 (excerpted for brevity) Stephen P. Mulligan and Chris D. Linebaugh, "Data Protection Law: An Overview," Congressional Research Service, R45631, March 25, 2019 (excerpted for brevity) - Alternative Formats 2. U.S. Department of Health and Human Services, "Summary of the HIPAA Privacy Rule" (excerpted for brevity) U.S. Department of Health and Human Services, "Summary of the HIPAA Privacy Rule" (excerpted for brevity) - Alternative Formats 3. U.S. Department of Health and Human Services, "Summary of the HIPAA Security Rule" (excerpted for brevity) U.S. Department of Health and Human Services, "Summary of the HIPAA Security Rule" (excerpted for brevity) - Alternative Formats