by Gary Pritts | Jun 5, 2012 | HIPAA
The HITECH Act extended HIPAA enforcement authority to State Attorney Generals. As part of a cooperative enforcement effort, last year the HHS Office of Civil Rights (OCR) provided all expense paid training to the staff of the AGs. Yesterday, OCR posted the contents... Read More
by Gary Pritts | Apr 19, 2012 | HIPAA
Phoenix Cardiac Surgery, PC, a small physician practice, settled a HIPAA privacy and security complaint for $100,000 and agreed to a Corrective Action Plan. The settlement agreement (in which the practice does not admit liability) is the culmination of an... Read More
by Gary Pritts | Apr 11, 2012 | HIPAA
In this latest installment about risk analysis we continue the difficult quest to quantify risk of data breach. Hospitals and physician practices are conducting computer security risk analyses for HIPAA compliance and for meaningful use (per HIPAA Security 45 CFR... Read More
by Gary Pritts | Mar 31, 2012 | HIPAA
Hospitals and physician practices conducting computer security risk analyses for HIPAA compliance and for meaningful use (per HIPAA Security 45 CFR 164.308(a)(1)) must assess the threats and likelihood of occurrence. Because most breaches are never reported, accurate... Read More
by Gary Pritts | Mar 8, 2012 | HIPAA
HIPAA Covered entities, including hospitals and physicians who are implementing electronic records with hopes of attaining Meaningful Use and qualifying for federal incentives, are performing a computer security risk analysis, or risk assessment. Conducting regular... Read More
by Gary Pritts | Mar 2, 2012 | HIPAA
(Editor’s note, December 2015: while the information in this post remains relevant, 2015 could be called the year of the health care breach. During 2015 alone, approximately 1 out of every 3 Americans had some of their health care data stolen. New threats and... Read More
Eagle works with clients in healthcare and healthcare business associates to ensure HIPAA Security compliance. We provide a set of policy templates for a variety of business associate types including Cloud Vendors, Third Party Administrators, and Information Technology companies.