Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Is your Cloud Backup Company a HIPAA Business Associate?
More and more organizations are using cloud providers for computer backup. Internet upload speeds have increased, and the technology of cloud providers to provide...
County Boards – Review HIPAA Compliance for your Non-Profit
We all know that new HIPAA regulations – with a compliance deadline of September 23, 2013 – affect all of Ohio's County Boards of Developmental Disability. Hopefully,...
Compliance is not Security
HIPAA requires covered entities – and now business associates – to comply with the HIPAA Security Rule. However, compliance with these requirements is not the same as...
HIPAA “Business Associate” Definition Updated – a note for the County Board of Developmental Disabilities
The HIPAA Omnibus Rule – with a compliance deadline of September 23, 2013 – updated the definition of the term "Business Associate". The definition includes a laundry...
Eagle Consulting Releases Redlined HIPAA Regulations showing Omnibus Rule Changes
Eagle Consulting has released a redlined version of the HIPAA Privacy, Security and Breach regulations highlighting the changes introduced by the Omnibus Rule, which...
Long Delayed HIPAA Omnibus Rule released
After years of waiting, the Federal Department of Health and Human Services released last week what has come to be called the HIPAA Omnibus Rule. "The new rule will...
OCR Unveils Guidance regarding De-identification under HIPAA
The Office of Civil Rights yesterday published detailed guidance regarding the provisions in the HIPAA Privacy regulations that deal with de-identification of protected...
Risk Analysis – Hurricane Sandy, the Cloud, and System Downtime
With the meaningful use incentives, hospitals and physician practices are conducting their HIPAA Security Risk Analysis per 45 CFR 164.308(a)(1). The risk analysis...
Determining Probabilities in the Risk Analysis
The HITECH Act, in particular the meaningful use incentive program for physicians and hospitals, has placed the computer security risk analysis in the spotlight....
Meaningful Use Audits Underway
CMS has announced that providers – hospitals and physicians – who received meaningful use incentive payments are now being audited. CMS has outsourced this function to...
Alaska Medicaid pays $1.7M in first HIPAA Enforcement Action against public agency
Yesterday, the Alaska Department of Health and Social Services (DHSS), the state Medicaid agency, agreed to pay the U.S. Department of Health and Human Services (HHS)...
State Attorney General HIPAA Training Revealed; OCR Retains Big Hammer
The HITECH Act extended HIPAA enforcement authority to State Attorney Generals. As part of a cooperative enforcement effort, last year the HHS Office of Civil Rights...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation