Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Federally Qualified Health Centers on the Rise
Under current Healthcare policies and climate, this could be a good year for FQHC's -- Federally Qualified Health Centers. Take, for example, the findings of one...
VoIP Phones and HIPAA Compliance
Many years ago, the federal government issued guidance that clarified that traditional analog phone systems are NOT subject to the HIPAA Security rule provisions. So,...
The Ex-Employee Menace
Can former employees still access your organization's PHI? A 014 survey of employees by Osterman Research found that a whopping 89% of respondents retained access (in...
Tampa General Hospital breach highlights need for robust access controls
During a traffic stop and arrest August, the Tampa Police found patient documents regarding patients of Tampa General Hospital in the car. According to the...
The Cost of Not Being a Meaningful User
Medicare Payment Adjustments will produce significant, long-term financial loss for physicians who do not participate in Meaningful Use As part of the American Recovery...
Unencrypted CD containing Jersey City Medical Center patient info lost in mail
Identifying routine disclosures is key to safeguarding patient PHI During what Jersey City Medical Center called “a part of routine hospital operations,” an employee...
Gmail password leak sheds light on importance of cybersecurity awareness training
A list of nearly 5 million Gmail email addresses linked with passwords were leaked on a Russian Bitcoin security forum this week, but Google says not to worry. ...
Hospital Employee takes ER Logs to State Department of Health – A case of whistleblowing?
Recently, 6,500 patients of Tri-City Medical Center in Oceanside, California were notified of a breach of their protected health information. A former employee (on his...
HIPAA Audits for Healthcare Entities Delayed Again
The HHS Office for Civil Rights (OCR) announced yet another delay in the start of the long-awaited HIPAA Audit Program. This time, a technology upgrade is to blame. In...
Security Lessons from the Nude Photos of Jennifer Lawrence, Kate Upton and Rihanna
Several celebrities had their privacy compromised this week when nude photos they had uploaded to Apple’s iCloud were stolen by hackers and shared on the Internet. On...
OCR Provides Guidelines for Encryption of Data in Motion
HIPAA Security’s 42 requirements, many of which are merely one sentence in length, understandably result in many questions for organizations seeking to comply. To...
Does HIPAA Require Encryption?
The HIPAA Security Rule include two separate implementation specifications involving encryption. The first is contained at 45 CFR 164.312(a)(2)(iv): "Encryption and...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation