If you are covered entity under HIPAA, your patients have a right to access their protected health information (PHI) such as clinical records. The American Health Information Management Association (AHIMA) has developed a model...
In a recent article, Oregon Healthcare News reminded healthcare providers to use caution when looking to boost business and profits by using mutually-beneficial internet relationships. The federal government - and multiple states - have...
Covered entities (providers) are not permitted to simply abandon PHI or dispose of it in dumpsters or other containers that are accessible by the public or other unauthorized persons. The HIPAA Privacy and Security...
As a covered entity under HIPAA, be sure to evaluate the necessity of a Business Associate’s Agreement. This a required contract under HIPAA that is between you, the provider, and any entity handling your...
Are you backing your computer system up or storing file in "the cloud"? Do you know if your service is HIPAA-compliant? If you are utilizing an entity known as a Cloud Service Provider (CSP), the...
The final Omnibus rule necessitated changes to your office NPP within 60 days from September 23, 2013. If you have not updated your NPP, the Department Of Health and Human Services has templates that...
"Can I share information about a patient with their family?" "What if it is an emergency?" Have you had these questions? Whether a provider or a patient, the HIPAA Privacy rule covers what information can be...
Choosing to outsource various office activities that involve Protected Health Information (PHI) requires diligence to ensure compliance with federal HIPAA regulations. Many offices choose to outsource business activities such as billing, clinical record storage,...
The latest issue of “OUCH!”, a monthly security awareness newsletter from Securing the Human, a division of SANS Institute, is devoted to common e-mail security mistakes that any people might be making. It details four security issues that...