Five practical steps to protect electronic patient data: start with a complete risk assessment, plan for disasters with offsite backups, keep training your staff, weigh security before you buy, and bring every affected department along.
Most dental offices file claims electronically, so HIPAA applies in full, but many haven’t refreshed their training since the Privacy Rule arrived. Why small practices fall behind, and how regular training and onboarding keep them compliant.
The 2013 Final Rule extended the Security Rule’s general requirements and administrative safeguards to business associates. What changed in 45 CFR 164.306 and 164.308(a), from risk analysis to workforce termination procedures.
Before 2013, business associates only promised contractual safeguards. The HITECH Act and the Final Rule made them directly subject to the Security Rule’s administrative, physical, and technical safeguards, along with its penalties.
ONC’s 10-step plan for meeting meaningful use privacy and security requirements, from appointing privacy and security officials to the security risk analysis that every attestation depends on. Attest only after the work is done.
September 4, 2012. The Department of Health and Human Services (HHS) entities: Centers for Medicare & Medicaid Services (CMS) and Office of the National Coordinator for Health Information Technology (ONC)
July 9, 2012. Late in June, the Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) published its HIPAA/HITECH Act Privacy and Security Compliance
May 9, 2012. The Office of the National Coordinator for Health Information Technology (ONC) has issued a Guide to Privacy and Security of Health Information (Version 1.1 022312). This
April 18, 2012. Late last week, the Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) executed a Resolution Agreement and included Corrective Action Plan
On March 13, 2012, Blue Cross Blue Shield of Tennessee (BCBST) agreed to a payment of $1.5 million to the Department of Health and Human Services (HHS) and to
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is responsible for privacy and security enforcement under Health Insurance Portability and Accountability Act (HIPAA)
Since September 23, 2009, the enforcement arm of the Department of Health and Human Services (HHS), the Office for Civil Rights (OCR), has been required to publicly disclose breaches involving
