Many people ask us what is needed for an Incident Response Plan (IRP). It seems to be one of the HIPAA requirements that people have a hard time putting their arms around. So let’s take a practical look at what is needed. Incidents will happen The first thing that must be accepted and understood is...
There is a lot to know about HIPAA but let’s take a look at 6 things that you must know. HIPAA is not optional A lot of practices feel they are exempt from the HIPAA regulations. This may stem from the fact that “small practices” were granted a 1 year extension to comply with the...
A recent incident shows just how important it is to train all workforce members on the HIPAA regulations. Notice how I used the words workforce members and not just employees. A temporary staff member of Providence Holy Cross Medical Center recently posted patient information on Facebook. The temporary staff member also made fun of...
According to a report to Congress from The Department of Health and Human Services (HHS), there have been almost 8 million records breached since 2009. That is a staggering number. What is worse it that the number of data breaches continues to increase. Another way of looking at it is that we are only in...
In a very embarrassing and ironic turn of events, KPMG announced that they had a data breach that involved 4,500 patient records. KPMG has been selected by The Office of Civil Rights (OCR) to perform HIPAA compliance audits. So it appears that the company that will do HIPAA audits has experienced a HIPAA related data...
Susan McAndrew, deputy director of The HHS Office of Civil Rights (OCR) gives a very insightful interview to Howard Anderson, Executive Editor, HealthcareInfoSecurity.com. There are a lot of good points and I suggest reading the whole interview. I will point out a few of the highlights. When asked about who will be audited, McAndrew was...
I had a conversation with a group of physicians a couple weeks ago that shed some interesting light on where patient information resides and how to protect it. Each of the 5 physicians had a smartphone of various manufacturers. Two had iPhones, two had Android phones and one had a Blackberry phone. I asked the...
To be successfully in any business you need a few basic elements. Two of the elements include; customers that value your service and are willing to purchase your services. Secondly, you also need to eliminate or reduce liabilities that can damage or hurt your business. Implementing HIPAA security can help your business The first element...
There is a great post over at Infosec Island regarding a letter that was received from the Office of Civil Rights (OCR) after a data breach that occurred at a small medical practice. The breach was the result of a burglary. No details were given on what was stolen or what kind of patient information...
It seems that at least twice a month we are hearing about a health care organization that has had a data breach because of a lost of stolen laptop. Every time I read about a new breach I shake my head and ask myself why aren’t these organizations using encryption to protect the contents on...
© 2025 · HIPAA Secure Now!
Recent Comments