Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
HIPAA Compliance with Google’s G Suite (Google Apps)
Eagle’s opinion is that the agreement meets the minimum requirements of a HIPAA BAA, and as such Google accepts the minimum liability in the event of a data breach which is to send you “applicable Breach notifications” via email in the event of a breach. Google will not indemnify you, reimburse you for your breach notification costs, or pay any other damages.
Ransomware Guidance from OCR
The Office of Civil Rights issued a Fact Sheet regarding Ransomware and HIPAA. During 2016, ransomware attacks have increased 300% and healthcare organizations are...
2016 is Biggest HIPAA Enforcement Year, $19 Million in Fines
While only in the 8th month of the year, 2016 is already the biggest HIPAA enforcement year as tallied by the dollar amount of fines, which exceed $19 Million. Here is...
Meaningful Use Changes for 2016
Editor's Note: Subsequent to the publication of this article, CMS has renamed the "Meaningful Use" programs to "Promoting Interoperability". Once again we are sitting...
Meaningful Use morphs into “Advancing Care Information” under MACRA/MIPS
Editor's Note: Subsequent to the publication of this article, CMS has renamed the MIPS "Advancing Care Information" category to "Promoting Interoperability". The MACRA...
OCR Details 5 Most Common HIPAA Mistakes
The Health and Human Services Office of Civil Rights (OCR) recently detailed the 5 most common mistakes that organizations make in their HIPAA compliance programs, as...
The HIPAA Internal Audit
Because the Honor System Doesn't Work Electronic record systems contain a vast trove of interesting information – which can be a great temptation for a curious employee...
Vendor Risk Highlighted by Medhost Backdoor
This month Carnegie Mellon University's CERT Division issued an advisory regarding a flaw in Medhost's Perioperative Information Management System (PIMS). PIMS is a...
Meaningful Use, PQRS and Value Modifier for 2016
Editor's Note: Subsequent to the publication of this article, CMS has renamed the "Meaningful Use" programs and MIPS "Advancing Care Information" category to "Promoting...
The PQRS replacement
The Merit-based incentive Payment System (MIPS) introduces 4 measure categories to the Medicare incentive program space. As we have mentioned in previous posts, MIPS is...
Understanding the MIPS Scoring
As we mentioned in our initial post (What the MIPS?), the payment modifier for MIPS will be determined by a performance threshold (PT) set by CMS and your individual or...
What the MIPS!?!
The CMS “incentive” programs over the past several years -- Meaningful Use, PQRS, ePrescribing, and the Value-modifier -- have been used both the "carrot" and "stick"...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation