HIPAA Breach Notification Part 1

When you have a breach of Protected Health Information (PHI) the practice will have to notify the affected patients, Health and Human Services (HHS) and potentially other parties. The timing is critical. This month we will review notification requirements. Patient Notification You must provide notice to each affected patient in written form by first-class mail, […]

Information Security and Vendors

The very sad truth is the world is full of criminals and you have something they want: information and materials. You may have all technical safeguards in place to protect yourself from computer hackers and break-ins; however,  what are you doing about the stream of people who walk in your office for business purposes?  One […]

Phase Two HIPAA Audits Enter Round Three for Business Associates

The HHS Office for Civil Rights (OCR) is tasked with monitoring and enforcing the HIPAA regulations. While they have always conducted investigations and inspections as a result of breach incidents they plan to also pursue random audits.  To start this process they initiated 115 random audits of Covered Entities in 2011 and 2012 to test […]

OCR Begins Random Audits for Business Associates

The HHS Office for Civil Rights (OCR) has announced that the Business Associate Desktop Audits will take place this month, October, 2016. In 2011, OCR decided to expand HIPAA monitoring and enforcing to include random audits. During Phase One they initiated 115 random audits of Covered Entities (CE). Phase Two, Round one occurred in May, 2016 […]

The e Stands for Electronic

TMC wants to help you be OSHA and HIPAA compliant in a way that works best for your practice. As you know, we offer different compliance packages according to your practice’s needs. We are putting the spotlight on our eCompliance package which is a self-guided compliance program that lets you keep TMC in your back […]