By Matt Fisher – A scenario growing in frequency for physician practices and other healthcare organizations is the desire for patients to communicate with clinicians using the same tools as in everyday life.
Read More
By Marty Puranik – While the majority of HIPAA violations involve electronic data breaches, the HIPAA Security Rule requires that healthcare providers and business associates implement “physical safeguards for all workstations that access ePHI to restrict access to authorized users.”
By Art Gross – Quest Diagnostics, one of the country’s largest blood testing providers announced that nearly 12 million patients may have had their sensitive information compromised in a data breach.
By Art Gross – Medical Informatics Engineering, Inc. (MIE), a software and electronic medical records service provider has paid the Office for Civil Rights at the U.S. Department of Health and Human Services $100,000 to settle a HIPAA breach from 2015.
By Art Gross – Ransomware is not a new type of cyber-attack. In fact, it’s been around for years, but don’t let its age fool you; ransomware is not “yesterday’s news”. Ransomware is just as alive as ever before, continuing to dominate industries across the globe, and healthcare is not immune from its threat.
By Matt Fisher – After a lull in enforcement actions concerning HIPAA, the Office for Civil Rights re-entered the fray with a $3,000,000 bang. The settlement announced on May 6, 2019, imposes a significant fine after widespread non-compliance was found by OCR.
By Patrick Yee – One of the biggest trending topics within the healthcare sphere is something that, if all goes well, can be completely invisible. And if something goes wrong, it has the potential to create a crisis-level situation for your organization.
By Art Gross – Dr. William Scalf told a local news outlet, WWMT West Michigan, that hackers locked the files at Brookside ENT and Hearing Center, demanding $6,500 for the decryption key to regain access to their files.
By Matt Fisher – Notice of a new data breach is posted at least once a day. A frequent feature of many notices is the disclosure that the conduct giving rise to the breach happened months earlier, with the delay sometimes going into years in some instances.