by Gary Pritts | Jan 2, 2014 | HIPAA
2014 is here and that means the long-delayed U.S. Department of Health and Human Services (HHS) random audit HIPAA audits may be starting soon. As we shared in another recent post (“Rodriguez of OCR discusses HIPAA Enforcement, other topics,”) the Director of the HHS... Read More
by Gary Pritts | Dec 26, 2013 | HIPAA
Adult & Pediatric Dermatology, P.C. (APD), a 12 physician dermatology practice with offices in Massachusetts and New Hampshire, has become the first covered entity to settle “potential” HIPAA violations, involving the lack of breach notification policies. The... Read More
by Gary Pritts | Oct 1, 2013 | HIPAA
Healthcare organizations have good reason to adjust their threat assessments when updating their HIPAA Security risk analysis as required for HIPAA and meaningful use compliance. Based on a number of recent events, we know more about the capabilities and activities of... Read More
by Gary Pritts | Sep 23, 2013 | HIPAA
Leon Rodriguez, Director of the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services, celebrated September 23, 2013, the first day for enforcement of the HIPAA Omnibus Rule, by addressing the HIMSS Health Privacy Forum in Boston. Rodriguez... Read More
by Gary Pritts | Sep 19, 2013 | HIPAA
HIPAA Covered entities across the country are updating their policies in advance of the September 23, 2013 compliance deadline for the HIPAA Omnibus rule changes. Covered entities – hospitals, physician practices and other providers – can reduce their risks with a... Read More
by Gary Pritts | Sep 17, 2013 | HIPAA
Yesterday the Department of Health and Human Services Office of Civil Rights (OCR), the agency responsible for enforcing the HIPAA regulations, released model notices of privacy practices. Eight versions were released, 4 for health providers and 4 for insurers. These... Read More