Healthcare organizations are increasingly using cloud computing vendors for electronic records, billing and revenue cycle management, file sharing, backup, and a wide variety of other functions — and HHS Office for Civil Rights (OCR) has released important new guidance for these companies.
Recently, entire hospital networks have been shut down for time periods between 3 days and 3 weeks due to ransomware attacks. What can be done? Fortunately, there are established best practices which can prevent one of these attacks in the first place, or reduce the impact if a network is infected. We have some advice for you.
Eagle’s opinion is that the agreement meets the minimum requirements of a HIPAA BAA, and as such Google accepts the minimum liability in the event of a data breach which is to send you “applicable Breach notifications” via email in the event of a breach. Google will not indemnify you, reimburse you for your breach notification costs, or pay any other damages.
The Office of Civil Rights issued a Fact Sheet regarding Ransomware and HIPAA. During 2016, ransomware attacks have increased 300% and healthcare organizations are being targeted. This increase in threat activity increases the consequences of a weak security... Read More
While only in the 8th month of the year, 2016 is already the biggest HIPAA enforcement year as tallied by the dollar amount of fines, which exceed $19 Million. Here is a roundup of enforcement actions this year: Advocate Health Care, $5.55 Million. Advocate Health... Read More
The Health and Human Services Office of Civil Rights (OCR) recently detailed the 5 most common mistakes that organizations make in their HIPAA compliance programs, as reported by TechTarget’s SearchHealthIT coverage. According to OCR, the 5 most common HIPAA... Read More