By Matthew Fisher – The OCR announced yet another settlement action involving the HIPAA Right of Access. It is a reminder that right of access remains a focal point for OCR even though cyberattacks formed the basis for settlements announced earlier in 2024.
Read More
By Nick Lees – Sharing these 5 essential steps and insights from my experience to support your organization’s journey towards a successful ISO 27001:2022 certification.
By Ian Cohen – My Health My Data Act went into effect on March 31, 2024 This law is a game changer for companies, even outside of healthcare. The law requires companies to get an explicit “opt-in” for HIPAA Consent when collecting certain types of data.
By Ryan Hamilton – Change Healthcare will do exactly what its name says: change healthcare. While its mission statement is noble, the immediate industry-wide changes stemming from the recent cyberattack that it fell victim to, are shining a spotlight on an issue that has plagued healthcare: cybersecurity.
By Harikrishna Kundariya – The process of HIPAA-compliant software development is complicated and requires the implementation of efficient design, solid security policies, and a consistent focus on data protection.
By Art Gross – In healthcare, mobile devices have become seamlessly woven into the fabric of delivering efficient and timely patient care. CEs and BAs need comprehensive mobile device management practices to ensure HIPAA compliance and confidentiality.
By Art Gross – While HIPAA is all about protecting patient privacy, the Privacy Rule is just one of five areas of regulation. When it comes to annual requirements, the other heavy hitter is the Security Rule, which focuses on securing technology.
By Matthew Fisher – HHS released a final rule that will establish greater alignment between Part 2 (privacy of substance use disorder treatment records) and HIPAA. They kicked off the process with a notice of proposed rulemaking that was published on 12/2/22.
By David R. Burda – If you’re running a healthcare business, ransomware attacks are old news. You know they’re coming, and you should be ready for them and be able to prevent them or at least react to them effectively to protect your business and your customers.