New Guidance from OCR: Patching Software is Not Optional!

by Gary Pritts | Jul 27, 2018 | Business Associates & Others, Health Information Technology, HIPAA, Large Providers, Physician Practices

The Department of Health and Human Services Office of Civil Rights (OCR) published its Guidance titled “Guidance on Software Vulnerabilities and Patching”, in its June 2018 newsletter. In this Guidance, OCR stated that “identifying and mitigating the... Read More

Who are the Threats to Public Health Information?

by Gary Pritts | Jul 24, 2018 | Business Associates & Others, General News, Health Information Technology, HIPAA, Large Providers, Physician Practices, Threat Intelligence

A key component of any risk analysis and risk management program is understanding who the threats to your organization’s PHI data are.

Read More

Model Business Associate Agreements (BAAs) for Business Associates

by Gary Pritts | Jul 16, 2018 | Business Associates & Others

Entities who are Business Associates need a model BAA to use with their customers, and may also have subcontractors for which a BAA is also needed.  Should you use the same agreement?  Probably not!   Eagle recently updated the model BAA included in our various HIPAA... Read More

What Is GDPR?

by Gary Pritts | Jun 28, 2018 | Business Associates & Others, Large Providers, Physician Practices

GDPR is an EU regulation that governs the handling and processing of EU citizen data. What does this mean for healthcare data compliance in the U.S.?

Read More

Phishing and Eagle’s New Security Awareness Program

by Gary Pritts | Jun 27, 2018 | Business Associates & Others, DD Boards, General News, HIPAA, Large Providers, Physician Practices, Threat Intelligence

Phishing is a big threat to healthcare, and employees are the weak link. You need regular, effective security awareness training for staff. Eagle can help.

Read More

MyFitnessPal Data Breach

by Gary Pritts | Jun 22, 2018 | Business Associates & Others

MyFitnessPal, a fitness app with 150 million users, experienced a large data breach in February. Use of obsolete hashing algorithms put users at risk.

Read More