As we work with more and more clients to help them comply with the HIPAA Security Rule, it is becoming clear that many people don’t fully understand HIPAA. The good news is that we can help them understand HIPAA and all the things that need to be done to comply with HIPAA and to protect...
The Health and Human Services’ Office of Civil Rights (OCR) has handed out over $5 million in HIPAA fines in the past 2 weeks. OCR has also stated that more HIPAA enforcement is coming. So now is a very good time to think about how you can avoid regulatory penalties and even more importantly, how...
OCR is serious about enforcement! That is a message that 3 officials from the U.S. Department of Health and Human Services’ Office for Civil Rights made clear as they presented at the 19th National HIPAA Summit. The 3 officials who presented (links below take you to their presentations [PDF] ) were: Susan McAndrew – Deputy Director for...
The Office for Civil Rights (OCR) showed once again that is serious about enforcing the HIPAA security and privacy regulations. OCR invited the 50 state attorneys general (AG) to 2 day in-person meetings to prepare them to better enforce the HIPAA regulations. The HITECH Act gave state attorneys general the authority to bring civil actions...
The following blog was written a year ago but the content is still relevant today. What if organizations looked at HIPAA security as a competitive advantage and not just something that is mandatory and required by the government? In two recent surveys a clear message is being sent. The message is that patients want doctors...
The Health and Human Services’ (HHS) Office of Civil Rights (OCR) issued a $4.3 million fine to Cignet Health of Prince George’s County, MD (Cignet) for violating the Privacy Rule of HIPAA. Cignet refused to provide 41 patients with access to their medical records. Under HIPAA, patients are entitled to have access to their medical...
According the Health Data Management magazine, The HHS Office for Civil Rights plans big changes to privacy and security regulations. Below are some sections from their article. Adam Greene, senior health IT and privacy advisor in the OCR, outlined a slew of changes to existing regulations. The final HITECH privacy, security and breach notification rules...
There are countless security products on the market today. You can buy products from hardware firewalls, to anti-virus / anti-malware, to web content management, to email encryption, to log management platforms, the list goes on and on. All of these products have a place and help in protecting data and electronic protected health information (ePHI)....
One of the administrative requirements of the HIPAA Security Rule is to implement a security awareness and training program. And one of the implementation specifics is to implement security reminders. (5)(i) Standard: Security awareness and training. Implement a security awareness and training program for all members of its workforce (including management). (ii) Implementation specifications. Implement:...
A Risk Assessment is required in order to comply with the HIPAA Security Rule. The Security Management Process standard in the Security Rule requires organizations to “[i]mplement policies and procedures to prevent, detect, contain, and correct security violations.” (45 C.F.R. § 164.308(a)(1).) Risk analysis is one of four required implementation specifications that provide instructions to...
© 2024 · HIPAA Secure Now!
Recent Comments