Eagle provides a free newsletter each month for customers on HIPAA and Meaningful Use security matters. You can subscribe to the Eagle Healthcare IT Security Newsletter free.
Ten years after the EHR-promoting HITECH Act was passed, many EHRs still struggle with functionality, are not user friendly, don’t “talk to each other”, and even malfunction, according to Fortune and Kaiser Health News. Most of of the time, these issues merely result in frustration among physicians and staff. The Fortune/Kaiser article makes clear that EHR problems are resulting in outcomes far worse — including patient injury, permanent disability and even death. Effective risk analyses will factor the impact of EHR errors.
Small medical practices are not immune from cyberattacks, but complex defensive recommendations can seem overwhelming. Here we break down our top 10 list of cybersecurity basics that will help small practices protect themselves from data breaches and other cybersecurity risks.
In October 2018, a Portuguese hospital was fined 400,000 euros for 3 GDPR violations. The violations stem from the hospital’s alleged improper data access controls, failure to apply basic technical and organizational safeguards to prevent access to personal data, and failure to test the safeguards that ensure the security of data processing. The hospital is contesting the decision.
With the General Data Protection Regulation (GDPR) in effect, US-based healthcare organizations and HIPAA business associates who handle data of European Union citizens may have to comply with GDPR and HIPAA simultaneously. Our comprehensive and customizable HIPAA and GDPR policy templates help you comply with both.
The Ohio Department of Medicaid created two medical release forms. One form complies with the HIPAA requirements; the other form complies with 42 CFR Part 2 requirements regarding substance use confidentiality. These forms, if properly completed, must be accepted by any recipient in Ohio.
