Introduction Navigating HIPAA can be an intimidating process, from finding information to documenting completed requirements. According to the training page of the OCR’s website: “The HIPAA Rules are flexible and scalable to accommodate the enormous range in types and sizes of entities that must comply with them. This means that there is no single standardized...
5 Vital Plans Every Covered Entity and Business Associate Should Have in Place With cyberattacks and data breaches on the rise in healthcare, safeguarding sensitive information has become paramount for organizations. For covered entities and business associates, proactivity is key to maintaining the integrity and confidentiality of data. Here are five essential plans that every...
When it comes to HIPAA compliance, it’s easy to feel as if you’re being pulled in a million different directions at once. In part, this could be due to the fact that there are 4 different rules that go into HIPAA: the Privacy Rule, the Security Rule, the Breach Notification Rule, and the Omnibus Rule....
Let’s discuss the most bustling room in your healthcare practice- the waiting room. Whether it’s parents waiting for their children to finish their sessions, patients who arrive super early, or you’re having one of those running-behind days, having a HIPAA-compliant space is crucial to maintain patient privacy and security. So, what can you do to...
This week is Data Privacy Week. This international effort to encourage respect for privacy is encouraged for all industries, but in healthcare, it’s essential. Data privacy in healthcare is a critical issue that affects not only patients, but also healthcare providers, insurers, and researchers. The sensitive nature of personal health information (PHI) and the potential...
The HHS Office for Civil Rights (OCR) has announced resolutions regarding three HIPAA violation investigations. These settlements result from a years-long emphasis on enforcing this regulation by the OCR. There were three dental practices that were given fines with regard to the potential violation of the HIPAA Privacy Rule’s patient right of access. Recently appointed...
Portability in HIPAA There are many aspects of HIPAA. And sometimes there isn’t a clear understanding of what it covers. We also find that it is the “P” that often trips people up. Because of the strong emphasis on confidentiality, security, and safe handling of information, there is an assumption that the word Privacy is...
Health Care Cybersecurity Update on Guidance The National Institute of Standards and Technology (NIST) has provided updated guidance for the health care industry. Designed to help with electronically protected health information (ePHI), they have created a new draft titled Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide (NIST Special...
Are you familiar with the European Union (EU) regulation of GDPR? There may be some confusion over this policy and those who believe it to be the counterpart to the United States’ HIPAA regulation. While there may be some overlap, they are not the same. As a US-based business that is a covered entity or...
Whether a change in your business structure came about from the pandemic, or it just makes more sense for your team, remote work is the norm for many more professionals today than it was in years past. If you’re in healthcare, this means that you need to factor in the HIPAA component as well as...
Recent Comments