HHS Office of Civil Rights (OCR) Warns: Don’t Forget About Physical Security
In their most recent newsletter, OCR reminds all that HIPAA rules require that you protect patient information with technological, administrative and physical safeguards. OCR states: “While the latest security solutions to combat new threats and vulnerabilities get much deserved attention, appropriate physical security controls are often overlooked. Yet physical security controls remain essential and often […]
HHS Releases New Guidance on Research Authorizations
In June 2018 the Department of Health and Human Services (HHS) issued guidance related to streamlining authorization under HIPAA for uses and disclosures of protected health information (PHI) for research. Under the 21st Century Cures Act of 2016, HHS is required to help simplify the research process by clarifying: 1. the authorization for use or […]
Protect ePHI when Dumping Data Devices
Before the wide-scale introduction of technology to the healthcare industry, the most important thing to remember about disposing of old PHI used to be to lift with your legs to get those dusty storage boxes into the bin for shredding and recycling. Now that most patient data is stored electronically, there’s a lot less heavy […]
DEA Warns of Fax-based Phishing Scams Targeting Physicians and Pharmacies
The most recent warnings from the Drug Enforcement Administration (DEA) this month concern phishing scams from individuals posing as DEA agents attempting to obtain a physician’s DEA registration number or signature, PHI, social security numbers and even credit card data. Be on guard for suspicious phone calls, faxes or emails. The DEA does not ever […]
Breach Reporting By MARCH 1, 2018 to Health and Human Services (HHS)
Just a reminder to those having a breach in the past year impacting less than 500 individuals, you have until March 1, 2018, to report those breaches to HHS. If you have not already done so, all such breach reporting MUST be sent to HHS no later than this date. If you have a breach, […]
HIPAA and Battling Parents-Newest Update
Dealing with a minor’s medical records can be a HIPAA minefield when a child is from a blended family or the parents have a contentious divorce going. This gets especially sticky when you add in stepparents and grandparents and situations where a minor controls all or a portion of their own records. It’s a good […]
HIPAA Scare Tactics
Someone called my practice and said I have to fill out their checklist for HIPAA each year. Is this true or is it HIPAA scare tactics? Not Really. You do have to perform a “Risk Analysis” (RA) checklist of all the ways you store, input and transmit protected health information (PHI). This must be done […]
HIPAA and Law Enforcement
When can you share protected health information with law enforcement? There are certain circumstances when you can share PHI with the law. You should always keep the “minimum necessary” rule in mind whenever you are giving out information. Coroners/Medical Examiners Information needed to identify a body or determine cause of death can be sent to […]
TMC Automates OSHA Compliance Audits with Mi-Platform
Goes from Paper to Mobile in Less than 90 Days with an Automated Auditing Process Total Medical Compliance (TMC) provides compliance consulting to the healthcare marketplace including HIPAA training, OSHA training, and Infection Control programs for medical and dental practices. When TMC needed a partner to upgrade its paper-based auditing processes and provide an automated […]
HIPAA Rules On Hold for Hurricane Relief
Rock a bye Texas and the Sunshine State When the wind blows the houses fall down When the rains fall water fills the town Residents flee without cradle or crate While Americans can agree that HIPPA rules designed to protect their privacy in the healthcare system are a great idea, the regulations can, at times, […]