HIPAA.com cofounder Ed Jones is a consultant and author of books on healthcare privacy, security, and electronic health records. He was an SVP at an NYSE-traded health plan insurer and held senior roles at the US Department of Justice and the CIA.
The 2013 Final Rule replaced the “harm” standard with a presumption of breach. The new definition, its three exclusions, the end of the limited data set exception, and why the burden of proof now sits with you.
January 25, 2013. The Final Rule is published, at last! Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical
January 18, 2013. On January 16, 2013, the Office of Management and Budget (OMB) completed its EO 12866 regulatory review of RIN: 0945-AA03, and the long-awaited release of
ONC’s 10-step plan for meeting meaningful use privacy and security requirements, from appointing privacy and security officials to the security risk analysis that every attestation depends on. Attest only after the work is done.
September 5, 2012. Today, the Federal Register published the Centers for Medicare & Medicaid Services (CMS) Final Rule: Administrative Simplification: Adoption of a Standard for a Unique Health Plan Identifier;
September 4, 2012. The Department of Health and Human Services (HHS) entities: Centers for Medicare & Medicaid Services (CMS) and Office of the National Coordinator for Health Information Technology (ONC)
August 24, 2012. Today, the Office of Management and Budget (OMB) completed review and sent to the Federal Register for publication on September 5, 2012, the Centers for Medicare &
Five things every covered entity and business associate should do: a current risk analysis, documented policies and procedures, workforce training, encryption of mobile devices, and investing in safeguards before a breach costs far more.
August 10, 2012. Today, the Interim Final Rule with comment period (IFC): Administrative Simplification: Adoption of Operating Rules for Electronic Funds Transfers (EFT) and Remittance Advice Transactions, was published in
July 9, 2012. Late in June, the Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) published its HIPAA/HITECH Act Privacy and Security Compliance
May 16, 2012. The Department of Health and Human Services' (HHS) HIPAA/HITECH Act privacy and security enforcement arm, Office for Civil Rights (OCR), is responsible under the HITECH
May 9, 2012. The Office of the National Coordinator for Health Information Technology (ONC) has issued a Guide to Privacy and Security of Health Information (Version 1.1 022312). This
