Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
New HIPAA Obligations for EHR vendors and VARs are Coming
EHR Authors and Value Added Resellers (VARs) will soon have their own HIPAA obligations. At present, EHR Authors and VARs are contractually obligated by the terms of...
HIPAA and Facebook
Facebook, and other Social Media including Twitter, Google+, LinkedIn, and others are a reality of mainstream society. Employers in general, including HIPAA covered...
JCAHO Weighs in: “No texting of physician orders”
The Joint Commission (JCAHO) weighed in recently regarding the issue of physicians using text messages to transmit orders. They didn't explicitly state that their...
OIG To Review Portable Device Security, OCR HIPAA Enforcement
The Department of Health and Human Services Office of the Inspector General, the agency's watchdog, has released its annual work plan. It is 117 pages specify hundreds...
Random HIPAA Compliance Audits Begin
The random HIPAA compliance audits mandated under the HITECH Act will begin this month. Yesterday, the HHS Office of Civil Rights (OCR) announced that every covered...
New Texas Medical Privacy Regulations More Stringent than HIPAA
Texas Governor Perry recently signed House Bill 300 -- which further strengthens Texas medical privacy laws, which were already more stringent than HIPAA. To begin,...
OCR Details HIPAA Audit plans for 2011-2012
On August 11, 2011, the HHS Office of Civil Rights, the agency responsible for enforcement of the HIPAA regulations, delivered its first annual report on HIPAA...
OIG Criticizes CMS for Poor HIPAA Security Enforcement
In May 2011 The HHS Office of the Inspector General (OIG) published their findings regarding CMS's oversight and enforcement of the HIPAA Security Rule. The findings...
At its Beijing facility, Microsoft Hurries Fix to Windows
Reporting from Beijing, China. Microsoft is hurrying to fix a significant problem with windows at its Beijing facility. Recently, Microsoft constructed a new,...
Updating Your Risk Analysis for 2011
Hospitals, physician practices, government agencies, business associates and others who must comply with the HIPAA Security regulations should dust off the previous...
Achieving Meaningful Use Stage 1 for Privacy and Security
(Editor's Notes: 5/23/2018: Over the last 7 years, this program has morphed annually, although this post remains relevant. The Meaningful Use program is now called...
OCR To Train State AGs on HIPAA Enforcement
Fresh news from the National HIPAA Summit, held March 9-11 in Washington DC, is that the HHS Office of Civil Rights has scheduled "HIPAA Enforcement Training" for State...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation