HIPAA privacy and security
Defense and government contractors holding protected health information face a dual compliance burden: meeting U.S. Department of Defense cybersecurity requirements under DFARS while simultaneously satisfying the U.S. Department of Health and Human Services Office for Civil Rights on HIPAA Privacy and Security Rule obligations. The U.S. Federal Trade Commission has also expanded its health data enforcement posture following the 2023 Health Breach Notification Rule update, which now reaches contractor-adjacent data flows that legacy HIPAA frameworks did not cover. Compliance teams in this sector are actively auditing business associate agreements and access control documentation against both regimes before contracting officers begin asking.
Watch
- HHS OCR HIPAA Security Rule proposed update: new risk analysis specificity requirements pending finalization
- DFARS 252.204-7012 overlap with HIPAA when ePHI sits on covered defense information systems
- FTC Health Breach Notification Rule 2023 amendments extending to health app and vendor data
- Business associate agreement gaps flagged in recent OCR audit protocols for subcontractor chains
Recent material activity in Defense & Government Contracting
-
UK Ministry of Defence awards up to £400 million drone contract to Tekever, replacing Watchkeeper with AR5 systems by 2029
The UK Ministry of Defence has selected Tekever's AR5 surveillance drone to replace the Watchkeeper system under a contract worth up to £400 million over ten years. An initial order of six AR5 units will scale to up to 2…
Read a full sample brief → -
ASPI analysis flags absence of federal regulatory framework governing data collection by Chinese-manufactured drones in Australian airspace
Australia has no binding domestic regulation governing data collected by Chinese-manufactured drones operating on Australian soil. The Australian Strategic Policy Institute identified this gap in analysis published on Ju…
Read a full sample brief → -
State Department imposes ITAR statutory debarment on persons convicted of Arms Export Control Act violations
The Department of State's Bureau of Political-Military Affairs published a notice on July 24, 2026 imposing statutory debarment under the International Traffic in Arms Regulations on persons convicted of violating, or co…
Read a full sample brief → -
ASPI strategic commentary frames Australian sovereign defence-industrial and autonomous-systems capability as a near-term procurement and policy priority
The Australian Strategic Policy Institute published commentary on July 24, 2026 drawing on Defence Minister Richard Marles's remarks at the May 2026 Shangri-La Dialogue. The piece identifies subsea cable security, autono…
Read a full sample brief → -
UK Ministry of Defence publishes FCAS Digital Strategy setting nine strategic ends for next-generation combat air digital architecture
The UK Ministry of Defence published the Future Combat Air System Digital Strategy on July 23, 2026. The document establishes nine strategic ends governing digital engineering, data architecture, interoperability, and th…
Read a full sample brief → -
NATO North Atlantic Council approves 2027–2031 Common Funding Resource Plan and Fuel Supply Chain Plan
On July 22, 2026, the North Atlantic Council approved NATO's 2027–2031 Common Funding Resource Plan, setting Alliance investment priorities for the next five years. The Council also approved a Fuel Supply Chain Plan, com…
Read a full sample brief → -
ASPI strategic analysis calls for northern Australia data centre dispersal on national security grounds
The Australian Strategic Policy Institute published analysis on July 23, 2026 arguing that AI data centre infrastructure constitutes a critical national security asset and should be geographically dispersed. The analysis…
Read a full sample brief → -
Australia publicly commits strategic support and funding to the Philippines amid South China Sea tensions
Australian Foreign Minister Penny Wong issued a public statement on July 22, 2026 affirming Australia's strategic, financial, and capability support for the Philippines amid sustained Chinese maritime pressure. The state…
Read a full sample brief → -
MOD awards £20 million contract to Lockheed Martin UK for hypersonic target development under Project Bowline
The Ministry of Defence awarded a £20 million contract to Lockheed Martin UK on July 22, 2026 to deliver Project Bowline, a hypersonic target programme supporting missile defence testing. The contract marks the MOD's ret…
Read a full sample brief → -
UK Ministry of Defence awards BAE Systems a £708 million contract extension for Future Combat Air System technology development
The UK Ministry of Defence has extended its contract with BAE Systems and Team Tempest partners by £708 million to accelerate Future Combat Air System technology development. Announced on 22 July 2026 at Farnborough Inte…
Read a full sample brief →