In 2013, Google began signing HIPAA business associate agreements for Gmail, Calendar, Drive, and Vault. What the agreement covered, which Google services stayed off-limits for PHI, and the safeguards you still need. Check Google’s current terms.
Who is ultimately responsible for enforcement of HIPAA and what types of penalties are levied when a covered entity or business associate is found to be non-compliant with the
Five practical steps to protect electronic patient data: start with a complete risk assessment, plan for disasters with offsite backups, keep training your staff, weigh security before you buy, and bring every affected department along.
Most dental offices file claims electronically, so HIPAA applies in full, but many haven’t refreshed their training since the Privacy Rule arrived. Why small practices fall behind, and how regular training and onboarding keep them compliant.
The first part of the HITECH Act is called "Improved Privacy Provisions and Security Provisions". Section 13402 is the section that starts the discussion of privacy and security
As the healthcare industry continues to digest profound HITECH changes to HIPAA Privacy and Security rules, two observations already are apparent and indisputable for covered entities and their business associates.
