Photo of Conor Duffy

Conor Duffy is co-chair of Robinson+Cole's Health Law Group and a member of the firm's Data Privacy + Security Team. Mr. Duffy advises hospitals, physician groups, accountable care organizations, community providers, post-acute care providers, and other health care entities on general corporate matters and health care issues. He provides legal counsel on a full range of transactional and regulatory health law issues, including contracting, licensure, mergers and acquisitions, the False Claims Act, the Stark Law, Medicare and Medicaid fraud and abuse laws and regulations, HIPAA compliance, state breach notification requirements, and other health care regulatory matters. Read his full rc.com bio here.

This post was co-authored by Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On February 3, 2026, President Trump signed HR 7148, the Consolidated Appropriations Act, 2026 (“the Act”) ending the 4-day partial government shutdown. The Act, part of a broader fiscal year (FY) 2026 spending package, includes a

February 16, 2026, is the deadline for each HIPAA covered entity to update its Notice of Privacy Practices (NPP) to incorporate new regulatory requirements enacted in 2024. Specifically, HIPAA-covered entities (including health care providers and health plans) are required to review and revise their NPPs as necessary to ensure compliance with a 2024 federal rulemaking

Healthcare providers are currently facing yet another termination of Medicare telehealth flexibilities at the end of the day on January 30, 2026, unless Congress acts on proposals to further extend the COVID-era flexibilities for telehealth. If no legislative action is taken before January 30, 2026, the providers and Medicare patients who have depended on expanded

On December 31, 2025, the federal Drug Enforcement Administration (DEA) extended current regulatory flexibilities related to tele-prescribing of controlled substances for another year. The DEA issued a fourth temporary extension (2026 Extension) of its pandemic-era telehealth flexibilities, which are now scheduled to end on December 31, 2026. The DEA explained that another extension

This post is co-authored with Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On November 12, 2025, President Trump signed H.R. 5371 the “Continuing Appropriations, Agriculture, Legislative Branch, Military Construction, and Veterans Affairs and Extensions Act, 2026” (the Act). The Act ended the federal government shutdown by providing necessary funding

This post is co-authored with Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

Healthcare providers are again confronted with the potential termination of telehealth services unless Congress acts to extend the Medicare flexibilities implemented during the COVID-19 pandemic. If no legislative action is taken before September 30, 2025, those providers

This post was co-authored with Ivy Miller, legal intern at Robinson+Cole. Ivy is admitted to practice in Massachusetts.

On September 10, 2025, the U.S. Court of Appeals for the Fifth Circuit dismissed an appeal of the federal court ruling vacating key provisions of the HIPAA reproductive health care regulations, which appears to signal the end

This post is co-authored with Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On July 14, 2025, the Centers for Medicare and Medicaid Services (CMS) issued the calendar year (CY) 2026 physician fee schedule (PFS) proposed rule, which in pertinent part proposes several changes affecting the delivery and reimbursement

This post was co-authored with Paul Palma, legal intern at Robinson+Cole. Paul is not admitted to practice law.

On June 30, 2025, Connecticut Governor Ned Lamont signed into law Public Act No. 25-168 (PA 25-168) (the Act), Connecticut’s Budget Bill for the period between July 1, 2025, and June 30, 2027. The Act includes two

On June 30, 2025 Connecticut Governor Ned Lamont signed a bill implementing the state budget through June 30, 2027, Public Act No. 25-168 (PA-168).  PA-168, among other things, contains changes to the state’s Certificate of Need (CON) program.

Termination of Services – Effective from Passage

In Connecticut, hospitals generally must obtain CON approval