Not every vendor with potential access to PHI is a business associate. IT contractors, cleaning crews, and consultants can still expose you to HIPAA and state privacy violations. A three-part strategy to manage the risk: policies, due diligence, and the right confidentiality agreement.
When a HIPAA breach hits, delay costs money. Build your response team before you need it: a data privacy attorney first (to help protect the investigation under privilege), then forensic and IT consultants, media relations, and HR.
When a HIPAA breach hits, delay costs money. Build your response team before you need it: a data privacy attorney first (to help protect the investigation under privilege), then forensic and IT consultants, media relations, and HR.
Five practical steps to protect electronic patient data: start with a complete risk assessment, plan for disasters with offsite backups, keep training your staff, weigh security before you buy, and bring every affected department along.
Not every vendor with potential access to PHI is a business associate. IT contractors, cleaning crews, and consultants can still expose you to HIPAA and state privacy violations. A three-part strategy to manage the risk: policies, due diligence, and the right confidentiality agreement.
Not every vendor with potential access to PHI is a business associate. IT contractors, cleaning crews, and consultants can still expose you to HIPAA and state privacy violations. A three-part strategy to manage the risk: policies, due diligence, and the right confidentiality agreement.
Cofounder and CTO of HIPAA.com. Computer scientist, 8x founder, and former wilderness EMT with three decades of building software in and around healthcare’s most regulated corners.
All articles
After 15 years helping clinicians move into health IT, Carolyn now helps providers and caregivers use technology to coordinate care, reduce errors, and support loved ones with chronic conditions. She has co-authored 20+ books on privacy and security.
All articles
HIPAA.com cofounder Ed Jones is a consultant and author of books on healthcare privacy, security, and electronic health records. He was an SVP at an NYSE-traded health plan insurer and held senior roles at the US Department of Justice and the CIA.
All articles
Guest author William Roberts is an associate in Shipman & Goodwin LLP’s Health Law Practice Group, focusing on health care corporate, regulatory, and compliance matters for hospitals, health systems, insurers, providers, and life sciences companies.
All articles
