Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Compliance Risk for Business Associates
Risk analysis for business associates is one of Eagle’s smart services, and it’s always needed both for business associate firms themselves and for the hospital, clinic and other healthcare entities relying on their associates for compliance to help avoid breaches and resulting government penalties. Compliance failures can cost up to $50,000 per incident.
Health IT Security Risks and Vulnerability Management
How can you guard against the increasing HIPAA related breach danger and avoid fines? We’ll look at some common breach sources and review solutions.
New Eagle HIPAA Policy Templates
Eagle has added three new downloadable HIPAA Policy templates bringing the total to six now available, ranging from HIPAA Privacy & Security Policy Templates for Medical Practices to Confidentiality & Computer Security Policies for Ohio DD Boards.
U. of Wa. Medicine settles potential HIPAA violations for $750k
The University of Washington Medicine (UWM) has agreed to a $750,000 settlement regarding potential HIPAA violations and a corrective action plan and annual reports on the organization’s compliance efforts. Had effective protection been in place, the breach most likely would not have occurred.
Health Data Breaches Appear on "Wall of Shame"
Are you susceptible to a healthcare data breach? More practices and hospitals are finding themselves on the Department of Health and Human Services’ “wall of shame” — a website listing health data breaches affecting 500 or more individuals.
Lahey Hospital and Medical Center settles HIPAA issues for $850,000
HIPAA rule enforcement is stepping up. On November 25, 2015, Lahey Hospital and Medical Center (Lahey) agreed to settle potential violations of HIPAA regulations for $850,000. This enforcement action highlights the importance of addressing the security of all ePHI, not simply the PHI contained in the electronic medical record.
Common Mistakes in the HIPAA Security Risk Analysis
With the advent of the Meaningful Use program, including the current Stage 2 requirements, healthcare organizations across the country have instituted the annual risk...
HIPAA Policy Templates for Business Associates
Are you a HIPAA business associate with an information technology product or service that needs to stay in compliance with HIPAA policies? According to HHS, a "Business...
Healthcare Cyber Security, Penalties & Solutions
When it comes to healthcare cyber security, the Government is stepping up audits and taking a closer look at business associates right now. Are you ready? What can you expect as the government changes and updates its rules, and brings a new focus on compliance? Audits. More rule changes. Enforcement. The bottomline is privacy through security.
2016 OIG Work Plan includes HIPAA and Meaningful Use Items
This week the HHS Office of the Inspector General (OIG) released its Work Plan for Fiscal Year 2016. Combing through this 76 page document revealed some items of...
CMS Unveils Long Awaited Meaningful Use Rule Changes for 2015
Did you know that Stage 2 is restructured from 17 core objectives and 6 menu set objectives to a simplified 10 required objectives? CMS has released its meaningful use rules for 2015 — we’ve reviewed them and have some analysis of objectives and measures for you.
Security Risk Analysis Required For MU Stages 2 and 3
What’s going on with new privacy and security objectives for Meaningful Use in healthcare? New MU Stage 2 Rules affirm that an annual Security Risk Analysis (SRA) must be conducted, and that the scope of this SRA may be limited to the data in the EHR.
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation