Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Meaningful Use Proposed Changes, Details
On April, 15, 2015, HHS proposed significant restructuring of the Meaningful Use rules for Stages 1 & 2. Overall this is good news for healthcare providers, many...
Overhaul of Meaningful Use Stages 1 & 2 Proposed
(Editor's Note 11/14/2015: If you have arrived here, check our post on the final update of these rules at CMS Unveils Long Awaited Meaningful Use Rule Changes for...
Federally Qualified Health Centers on the Rise
Under current Healthcare policies and climate, this could be a good year for FQHC's -- Federally Qualified Health Centers. Take, for example, the findings of one...
VoIP Phones and HIPAA Compliance
Many years ago, the federal government issued guidance that clarified that traditional analog phone systems are NOT subject to the HIPAA Security rule provisions. So,...
The Ex-Employee Menace
Can former employees still access your organization's PHI? A 014 survey of employees by Osterman Research found that a whopping 89% of respondents retained access (in...
Tampa General Hospital breach highlights need for robust access controls
During a traffic stop and arrest August, the Tampa Police found patient documents regarding patients of Tampa General Hospital in the car. According to the...
The Cost of Not Being a Meaningful User
Medicare Payment Adjustments will produce significant, long-term financial loss for physicians who do not participate in Meaningful Use As part of the American Recovery...
Unencrypted CD containing Jersey City Medical Center patient info lost in mail
Identifying routine disclosures is key to safeguarding patient PHI During what Jersey City Medical Center called “a part of routine hospital operations,” an employee...
Gmail password leak sheds light on importance of cybersecurity awareness training
A list of nearly 5 million Gmail email addresses linked with passwords were leaked on a Russian Bitcoin security forum this week, but Google says not to worry. ...
Hospital Employee takes ER Logs to State Department of Health – A case of whistleblowing?
Recently, 6,500 patients of Tri-City Medical Center in Oceanside, California were notified of a breach of their protected health information. A former employee (on his...
HIPAA Audits for Healthcare Entities Delayed Again
The HHS Office for Civil Rights (OCR) announced yet another delay in the start of the long-awaited HIPAA Audit Program. This time, a technology upgrade is to blame. In...
Security Lessons from the Nude Photos of Jennifer Lawrence, Kate Upton and Rihanna
Several celebrities had their privacy compromised this week when nude photos they had uploaded to Apple’s iCloud were stolen by hackers and shared on the Internet. On...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation