Healthcare Information Security

HIPAA and Compliance News

No HIPAA Violation for Employees Retaining PHI, Says Court

by

Former hospital employees who retained PHI following their termination at an Arkansas hospital did not commit a HIPAA violation, according to an Arkansas court decision. Pam Howard previously worked at the Division of General Surgery of the University...

AHA: Prohibit Health Plan Identifiers in HIPAA Transactions

by

The Department of Health and Human Services (HHS) should prohibit Health Plan Identifiers (HPID) and Other Entity Identifiers (OEID) when used within a HIPAA transaction, according to the American Hospital Association (AHA). The AHA submitted...

HIPAA Regulations Not Data Exchange Barrier, Says Halamka

by

HIPAA regulations can sometimes be used as an excuse for why healthcare organizations are unable to exchange information. Digital health information and health data sharing are increasingly necessary for the changing healthcare environment, according...

A Review of Common HIPAA Administrative Safeguards

by

HIPAA administrative safeguards are a critical piece to the larger health data security puzzle that all covered entities must put together. The three types of safeguards are not only a federal requirement, but they all play an important role...

Potential HIPAA Violations Found in LA County DPH Audit

by

An IT security audit at the L.A. County Department of Health (DPH) revealed potential HIPAA violations, and that there are several areas of improvement for DPH. There need to be better system access controls, IT equipment control, and computer...

NY Cancer Institute ePHI Security Audit Shows Proper Policies

by

An ePHI security audit of the Roswell Park Cancer Institute found that the organization has a strong information security program, but could still improve in its risk assessment ability, ePHI access controls, and certain technical safeguard implementations....

Mass. Hospital Hit With $200K OCR HIPAA Settlement

by

A Massachusetts hospital was fined $218,400 in a HIPAA settlement, according to a statement from the Department of Health and Human Services (HHS) Office for Civil Rights (OCR). Brighton, Massachusetts-based St. Elizabeth’s Medical Center...

A Review of Common HIPAA Physical Safeguards

by

HIPAA physical safeguards are an essential aspect to any covered entity’s PHI security, but could easily be overlooked. Technical safeguards and administrative safeguards could easily be pushed to the forefront of a covered entity’s...

Business Associates Benefit From HITRUST Program Expansion

by

The HIPAA Omnibus Rule requires that healthcare business associates adhere to HIPAA, and covered entities need to ensure that those third-parties remain diligent in their data security measures. In an effort to improve the relationship between...

Healthcare Not Only Industry Nervous About Compliance Audits

by

Healthcare compliance audits are reportedly coming soon, and covered entities of all sizes are working to ensure that they are prepared and have all data security issues ironed out. However, if a recent survey is any indication, healthcare is...

A Review of Common HIPAA Technical Safeguards

by

HIPAA technical safeguards are just one piece of the larger health data security plan that covered entities and their business associates must put together. However, it is a very important aspect. Over the next few weeks, HealthITSecurity.com...

Maintaining HIPAA Compliance While Preparing for HIPAA Audits

by

Federal regulators are actively preparing to conduct extensive audits to determine business compliance with HIPAA privacy and security requirements. Covered businesses that handle PHI, i.e.,  individually identifiable health information...

HIPAA Compliance and Mental Health: Breaking Down HIPAA Rules

by

HIPAA compliance is essential for covered entities and their business associates, but recent legislation has brought another issue to light: how can healthcare organizations stay HIPAA compliant when it comes to mental health? Some covered entities...

How Parkway Works Toward HIPAA Compliance

by

HIPAA compliance is something that all covered entities and their business associates need to work toward and closely monitor. No organization wants to miss a key security issue that eventually leads to a data breach. Successfully preparing for...

Why HIPAA Technical Safeguards Alone Are Not Enough

by

HIPAA technical safeguards are an important part of any covered entity or business associate’s data security plan. However, that security measure by itself is not enough to ensure that a health data breach will never occur, according to...

Patient Right of Access: Breaking Down HIPAA Rules

by

The HIPAA Privacy Rule dictates how covered entities must keep PHI secure, but another key aspect described in the federal legislation is the patient right of access. Individuals have the right to review or obtain copies of their own PHI, albeit...

HIPAA Privacy Rules Clarified in New Mental Health Bill

by

Representative Doris Matsui (D-CA) introduced legislation this week designed to clarify HIPAA privacy rules as they apply to mental health. The Including Families in Mental Health Recovery Act also aims to decrease mental health stigma, according...

Tenn. Governor Did Not Violate HIPAA, Says State AG

by

Earlier this week, Tennessee Attorney General Herbert Slattery concluded that the state’s governor did not violate HIPAA when he released certain information about state lawmakers who are on Tennessee’s health insurance program. Governor...

Proposed Mental Health Bill Accounts for HIPAA Regulations

by

A recently introduced mental health bill would also ensure that individuals with mental illness can have their caregivers treated as personal representatives for the purposes of HIPAA regulations. The Helping Families in Mental Health Crisis...

Breaking Down the HIPAA Risk Assessment

by

Conducting a HIPAA risk assessment is something that every covered entity must do to ensure that they are properly monitoring potential weak spots in their data security. At the time of publication, the Office for Civil Rights (OCR) had not yet...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks