Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Small Physician Practice Settles HIPAA Complaint for $100,000
Phoenix Cardiac Surgery, PC, a small physician practice, settled a HIPAA privacy and security complaint for $100,000 and agreed to a Corrective Action Plan. The...
Risk Analysis – Probability of Smartphone loss/theft
In this latest installment about risk analysis we continue the difficult quest to quantify risk of data breach. Hospitals and physician practices are conducting...
Risk Analysis – Quantifying Risk and Impact – Part 2
Hospitals and physician practices conducting computer security risk analyses for HIPAA compliance and for meaningful use (per HIPAA Security 45 CFR 164.308(a)(1)) must...
A Tale of Two Presidents – Lessons for ACOs
OK, Dick Cheney wasn't president but was a heartbeat away. Both Dick Cheney and another former leader, Bill Clinton, have been in the news recently as a result of their...
Risk Assessment: Quantifying Risk and Impact
HIPAA Covered entities, including hospitals and physicians who are implementing electronic records with hopes of attaining Meaningful Use and qualifying for federal...
Risk Assessment: Forget the PHI, they want your money
(Editor's note, December 2015: while the information in this post remains relevant, 2015 could be called the year of the health care breach. During 2015 alone,...
Securing your Home Wi-Fi Network
Virtually everyone has a home wi-fi network. It provides convenient access for laptops, smartphones, tablets and gaming devices. How do you protect yourself?...
45 CFR 164.308(a)(1), 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3) Explained
5/23/2018 Editor's Note: In April 2018, the Meaningful Use rules program has been renamed "Promoting Interoperability". Nonetheless, the language of this requirement...
Wake-up Call for Business Associates – Comply with HIPAA Now
Last month Minnesota Attorney General Lori Swanson filed suit against Accretive Health, Inc., a company which provides revenue cycle management services for two...
First OCR HIPAA Audits Underway
Adam Greene, JD, MPH, a former regulator in HHS, recently shared details about the random audit program begun by the HHS Office of Civil Rights (OCR). The audit targets...
Common Wireless Feature, WPS, Readily Hacked
An industry-standard feature on wireless routers marketed to consumers and small businesses, Wi Fi Protected Setup (WPS), is vulnerable to a simple "brute force"...
New HIPAA Obligations for EHR vendors and VARs are Coming
EHR Authors and Value Added Resellers (VARs) will soon have their own HIPAA obligations. At present, EHR Authors and VARs are contractually obligated by the terms of...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation