by Gary Pritts | Jul 22, 2013 | DD Boards
We all know that new HIPAA regulations – with a compliance deadline of September 23, 2013 – affect all of Ohio’s County Boards of Developmental Disability. Hopefully, policy development and other compliance activity is well underway. In most cases, the...
by Gary Pritts | Jun 15, 2013 | HIPAA
HIPAA requires covered entities – and now business associates – to comply with the HIPAA Security Rule. However, compliance with these requirements is not the same as effective security. This fact can be illustrated in the case of business associates offering...
by Gary Pritts | May 16, 2013 | DD Boards
The HIPAA Omnibus Rule – with a compliance deadline of September 23, 2013 – updated the definition of the term “Business Associate”. The definition includes a laundry list of business functions and services that cause a vendor to be a HIPAA Business...
by Gary Pritts | Feb 15, 2013 | HIPAA
Eagle Consulting has released a redlined version of the HIPAA Privacy, Security and Breach regulations highlighting the changes introduced by the Omnibus Rule, which was officially published January 25, 2013. The redlined version allows covered entities, business...
by Gary Pritts | Jan 19, 2013 | HIPAA
After years of waiting, the Federal Department of Health and Human Services released last week what has come to be called the HIPAA Omnibus Rule. “The new rule will help protect patient privacy and safeguard patients’ health information in an ever...
by Gary Pritts | Nov 27, 2012 | HIPAA
The Office of Civil Rights yesterday published detailed guidance regarding the provisions in the HIPAA Privacy regulations that deal with de-identification of protected health information (PHI). The general idea of this provision is that healthcare data sets may be...
by Gary Pritts | Nov 21, 2012 | HIPAA
With the meaningful use incentives, hospitals and physician practices are conducting their HIPAA Security Risk Analysis per 45 CFR 164.308(a)(1). The risk analysis focuses on the confidentiality, integrity and availability of health information. The last of these...
by Gary Pritts | Oct 16, 2012 | HIPAA
The HITECH Act, in particular the meaningful use incentive program for physicians and hospitals, has placed the computer security risk analysis in the spotlight. Meaningful use requires a risk analysis, also called a risk assessment, as per the HIPAA Security rules in...
by Gary Pritts | Aug 9, 2012 | CMS Quality Payment Programs
CMS has announced that providers – hospitals and physicians – who received meaningful use incentive payments are now being audited. CMS has outsourced this function to the New York audit contractor Figliozzi & Company. Providers who fail to produce documentation...
by Gary Pritts | Jun 27, 2012 | HIPAA
Yesterday, the Alaska Department of Health and Social Services (DHSS), the state Medicaid agency, agreed to pay the U.S. Department of Health and Human Services (HHS) $1,700,000 to settle possible violations of the HIPAA Security rule. DHSS further agreed to a...