What’s New in Cyber Crime?

cyber crime

When it comes to cyber security, you are on top of it! You have complex password phrases, password lockers, tight privacy settings on your social media, and even physical safeguards in place. Well done!  Unfortunately, scammers and cyber criminals are also on top of their game, continually evolving their techniques and exploiting technological and psychological […]

HHS Office of Civil Rights (OCR) Warns: Don’t Forget About Physical Security

In their most recent newsletter, OCR reminds all that HIPAA rules require that you protect patient information with technological, administrative and physical safeguards. OCR states: “While the latest security solutions to combat new threats and vulnerabilities get much deserved attention, appropriate physical security controls are often overlooked. Yet physical security controls remain essential and often […]

HHS Releases New Guidance on Research Authorizations

hipaa

In June 2018 the Department of Health and Human Services (HHS) issued guidance related to streamlining authorization under HIPAA for uses and disclosures of protected health information (PHI) for research. Under the 21st Century Cures Act of 2016, HHS is required to help simplify the research process by clarifying: 1. the authorization for use or […]

Protect ePHI when Dumping Data Devices

cellphone

Before the wide-scale introduction of technology to the healthcare industry, the most important thing to remember about disposing of old PHI used to be to lift with your legs to get those dusty storage boxes into the bin for shredding and recycling. Now that most patient data is stored electronically, there’s a lot less heavy […]

DEA Warns of Fax-based Phishing Scams Targeting Physicians and Pharmacies

phishing scams

The most recent warnings from the Drug Enforcement Administration (DEA) this month concern phishing scams from individuals posing as DEA agents attempting to obtain a physician’s DEA registration number or signature, PHI, social security numbers and even credit card data. Be on guard for suspicious phone calls, faxes or emails. The DEA does not ever […]

Breach Reporting By MARCH 1, 2018 to Health and Human Services (HHS)

Just a reminder to those having a breach in the past year impacting less than 500 individuals, you have until March 1, 2018, to report those breaches to HHS. If you have not already done so, all such breach reporting MUST be sent to HHS no later than this date. If you have a breach, […]

HIPAA and Battling Parents-Newest Update

Dealing with a minor’s medical records can be a HIPAA minefield when a child is from a blended family or the parents have a contentious divorce going. This gets especially sticky when you add in stepparents and grandparents and situations where a minor controls all or a portion of their own records. It’s a good […]

HIPAA Scare Tactics

HIPAA data privacy

Someone called my practice and said I have to fill out their checklist for HIPAA each year. Is this true or is it HIPAA scare tactics? Not Really. You do have to perform a “Risk Analysis” (RA) checklist of all the ways you store, input and transmit protected health information (PHI). This must be done […]

HIPAA and Law Enforcement

Congress passed a new set of laws on emergency preparedness and active shooter protocol that will go into effect on 11/15/2017.

When can you share protected health information with law enforcement? There are certain circumstances when you can share PHI with the law.  You should always keep the “minimum necessary” rule in mind whenever you are giving out information. Coroners/Medical Examiners Information needed to identify a body or determine cause of death can be sent to […]

TMC Automates OSHA Compliance Audits with Mi-Platform

Goes from Paper to Mobile in Less than 90 Days with an Automated Auditing Process Total Medical Compliance (TMC) provides compliance consulting to the healthcare marketplace including HIPAA training, OSHA training, and Infection Control programs for medical and dental practices. When TMC needed a partner to upgrade its paper-based auditing processes and provide an automated […]