Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
Not Familiar with 42 CFR Part 2? Perhaps You Should Be.
42 CFR Part 2 is a federal law aimed at protecting the confidentiality of substance abuse patient records. It is more restrictive than HIPAA in numerous ways, so you...
CMS Releases MIPS 2019 Proposed Rule: Top 3 Items to Be Aware Of
As we are moving through through year 2 of the MIPS program, it is imperative that eligible clinicians simultaneously prepare for the next few years and the prospective...
MIPS Cost Category: What Can You Do About It? Pt. 1
There are four categories to the 2018 MIPS program: quality, promoting interoperability (formerly advancing care information), improvement activities, and the cost...
MIPS Final Scores Not What You Were Expecting?
Eligible clinicians and groups that participated in MIPS performance year 2017 can now view their final scores as well as review the calculation of their 2019 payment...
New Guidance from OCR: Patching Software is Not Optional!
The Department of Health and Human Services Office of Civil Rights (OCR) published its Guidance titled "Guidance on Software Vulnerabilities and Patching", in its June...
Who are the Threats to Public Health Information?
A key component of any risk analysis and risk management program is understanding who the threats to your organization’s PHI data are.
Model Business Associate Agreements (BAAs) for Business Associates
Entities who are Business Associates need a model BAA to use with their customers, and may also have subcontractors for which a BAA is also needed. Should you use the...
Ransomware Still a Threat to Government Agencies.
Ransomware remains a threat to governments all across the country, and recovery is a tremendous financial burden, as seen in the recent attack on Atlanta.
What Is GDPR?
GDPR is an EU regulation that governs the handling and processing of EU citizen data. What does this mean for healthcare data compliance in the U.S.?
Private Legal Actions for “HIPAA Violations” Gain Momentum
Confidentiality violations are leading to civil lawsuits in addition to HIPAA enforcement actions. Until recently, courts have dismissed civil actions against...
Phishing and Eagle’s New Security Awareness Program
Phishing is a big threat to healthcare, and employees are the weak link. You need regular, effective security awareness training for staff. Eagle can help.
Email Encryption Considerations for DD Boards
Email encryption is a major area of non-compliance for DD boards. Read more to explore some of the typical challenges and a possible solution.
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation