Healthcare Information Security

HIPAA and Compliance News

A Review of Common HIPAA Administrative Safeguards


HIPAA administrative safeguards are a critical piece to the larger health data security puzzle that all covered entities must put together. The three types of safeguards are not only a federal requirement, but they all play an important...

Potential HIPAA Violations Found in LA County DPH Audit


An IT security audit at the L.A. County Department of Health (DPH) revealed potential HIPAA violations, and that there are several areas of improvement for DPH. There need to be better system access controls, IT equipment control, and...

NY Cancer Institute ePHI Security Audit Shows Proper Policies


An ePHI security audit of the Roswell Park Cancer Institute found that the organization has a strong information security program, but could still improve in its risk assessment ability, ePHI access controls, and certain technical...

Mass. Hospital Hit With $200K OCR HIPAA Settlement


A Massachusetts hospital was fined $218,400 in a HIPAA settlement, according to a statement from the Department of Health and Human Services (HHS) Office for Civil Rights (OCR). Brighton, Massachusetts-based St. Elizabeth’s Medical...

A Review of Common HIPAA Physical Safeguards


HIPAA physical safeguards are an essential aspect to any covered entity’s PHI security, but could easily be overlooked. Technical safeguards and administrative safeguards could easily be pushed to the forefront of a covered...

Business Associates Benefit From HITRUST Program Expansion


The HIPAA Omnibus Rule requires that healthcare business associates adhere to HIPAA, and covered entities need to ensure that those third-parties remain diligent in their data security measures. In an effort to improve the relationship...

Healthcare Not Only Industry Nervous About Compliance Audits


Healthcare compliance audits are reportedly coming soon, and covered entities of all sizes are working to ensure that they are prepared and have all data security issues ironed out. However, if a recent survey is any indication, healthcare...

A Review of Common HIPAA Technical Safeguards


HIPAA technical safeguards are just one piece of the larger health data security plan that covered entities and their business associates must put together. However, it is a very important aspect. Over the next few weeks,...

Maintaining HIPAA Compliance While Preparing for HIPAA Audits


Federal regulators are actively preparing to conduct extensive audits to determine business compliance with HIPAA privacy and security requirements. Covered businesses that handle PHI, i.e.,  individually identifiable health...

HIPAA Compliance and Mental Health: Breaking Down HIPAA Rules


HIPAA compliance is essential for covered entities and their business associates, but recent legislation has brought another issue to light: how can healthcare organizations stay HIPAA compliant when it comes to mental health? Some...

How Parkway Works Toward HIPAA Compliance


HIPAA compliance is something that all covered entities and their business associates need to work toward and closely monitor. No organization wants to miss a key security issue that eventually leads to a data breach. Successfully...

Why HIPAA Technical Safeguards Alone Are Not Enough


HIPAA technical safeguards are an important part of any covered entity or business associate’s data security plan. However, that security measure by itself is not enough to ensure that a health data breach will never occur, according...

Patient Right of Access: Breaking Down HIPAA Rules


The HIPAA Privacy Rule dictates how covered entities must keep PHI secure, but another key aspect described in the federal legislation is the patient right of access. Individuals have the right to review or obtain copies of their own PHI,...

HIPAA Privacy Rules Clarified in New Mental Health Bill


Representative Doris Matsui (D-CA) introduced legislation this week designed to clarify HIPAA privacy rules as they apply to mental health. The Including Families in Mental Health Recovery Act also aims to decrease mental health stigma,...

Tenn. Governor Did Not Violate HIPAA, Says State AG


Earlier this week, Tennessee Attorney General Herbert Slattery concluded that the state’s governor did not violate HIPAA when he released certain information about state lawmakers who are on Tennessee’s health insurance...

Proposed Mental Health Bill Accounts for HIPAA Regulations


A recently introduced mental health bill would also ensure that individuals with mental illness can have their caregivers treated as personal representatives for the purposes of HIPAA regulations. The Helping Families in Mental Health...

Breaking Down the HIPAA Risk Assessment


Conducting a HIPAA risk assessment is something that every covered entity must do to ensure that they are properly monitoring potential weak spots in their data security. At the time of publication, the Office for Civil Rights (OCR) had...

HIPAA Violation Leads to Probation for Radiologist


An Ohio radiologist is facing disciplinary actions from the state medical board after she reportedly committed a HIPAA violation. Dr. Aimee Hawley unlawfully accessed a colleague’s medical record, according to a DOTmed News article,...

What Happens in HIPAA Audits: Breaking Down HIPAA Rules


HIPAA audits are something that covered entities of all sizes must be prepared to potentially go through. As technology continues to evolve, facilities need to ensure that they are maintaining PHI security and understand how best to keep...

Breaking Down PHI Security Breaches and Their Impact


With another large health data breach being announced this week, it is essential that covered entities of all sizes understand the intricacies of PHI security. However, there is an important distinction in types of data that healthcare...


SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
Data Breaches

Our privacy policy

no, thanks