Protected Health Information

The Role of Nurses in HIPAA Compliance, Healthcare Security

by Kate Borten of The Marblehead Group

Nurses deal with private information all day every day, from nursing stations and offices to exam rooms to patient bedsides to operating rooms. However, due to their focus on a patient’s health...

Possible PHI Security Breach in FL Respiratory Facility

by Elizabeth Snell

Florida-based Rotech Healthcare Inc. reported that it may have experienced a PHI security breach after patient information was recovered by police from an unauthorized individual. The respiratory and...

Should a Health Information Exchange Be Opt-In or Opt-Out?

by Sara Heath

A vital part of boosting health data interoperability, health information exchange (HIE) has become a significant part of the health IT conversation. As patient care – and federal incentive...

Increased EHR Adoption Raises Need for Robust Security

by Elizabeth Snell

EHR security is one small piece to the larger data security puzzle that healthcare organizations, especially those of a larger size, are becoming increasingly aware of and looking to address. Under HIPAA, covered entities have the...

HHS Reviews HIPAA Regulations for Workplace Wellness Programs

by Jacqueline LaPointe

A recent Department of Health and Human Services (HHS) blog post by Jocelyn Samuels, the Director of the Office for Civil Rights, discusses how HIPAA regulations apply to wellness programs that are part...

Understanding Physical Safeguards, Healthcare Data Security

by Sara Heath

When creating strong healthcare data security measures, physical safeguards serve as a primary line of defense from potential threats. The Department of Health & Human Services (HHS) defines...

HIPAA Best Practices: Acceptable Use Policies, Team Training

by Lisa Myers of ESET North American

In an earlier post, we discussed the steps to performing a Risk Assessment. Once you’ve determined the risks within your healthcare environment, you can enlist your staff members to help you address...

AHIMA Releases Information Governance Principles for Healthcare

by Patrick Ouellette

The American Health Information Management Association (AHIMA) recently published its Information Governance Principles for Healthcare (IGPHC). AHIMA determined that there are eight core principles...

HIPAA Privacy Rule: Permitted PHI uses and disclosures

by Patrick Ouellette

Though sometimes the goals of the HIPAA Privacy Rule can get lost in data breach and monetary penalty news, ensuring that patient data is both properly protected and accessible should be a consistent...

MedAllies receives accreditation from EHNAC, DirectTrust

by Nicole Freeman

MedAllies, a provider of Direct services, has received full accreditation from Direct Trusted Agent Accreditation Program (DTAAP) for Certificate Authority (CA), Registration Authority (RA), and Health...

Managing a health data breach with a response plan

by Patrick Ouellette

Some organizations say they’re going to improve security after an incident. David Dover, Privacy and Security Officer at Alere Inc., can attest that his organization did make the effort to...