Art Gross

Portability in HIPAA

By Art Gross – There are many aspects of HIPAA. And sometimes there isn’t a clear understanding of what it covers. We also find that it is the “P” that often trips people up. Because of the strong emphasis on confidentiality, security, and safe handling of information, there is an assumption that the word Privacy is part of the title.


NIST and HIPAA

By Art Gross – The National Institute of Standards and Technology has provided updated guidance for the health care industry. Designed to help with electronically protected health information, they have created a new draft titled Implementing the HIPAA Security Rule: A Cybersecurity Resource Guide.



HIPAA Right to Access Enforcement

By Art Gross – The Office for Civil Rights isn’t offering leniency just because you’re a small business. Action will be taken, despite the impact that a HIPAA fine can have on this sector of healthcare. And as eleven recent investigations prove the point, many of those were small practices.


API Adoption and Healthcare

By Art Gross – Healthcare faces threats from cybercriminal activity at rates that continue to rise. The patient data that they access and maintain is valuable on the dark web in more ways than one. It can be an access point for a greater breach and then used to manipulate or steal identities and attack victims individually.



HIPAA and Audio-Only Telehealth

By Art Gross – HHS put clarity recently on how the HIPAA Security Rule applies to telephone technologies. In the case of telephone lines that are traditional landlines, the rule does not apply. But it does apply to mobile technologies that utilize electronic media such as WIFI.


Exceptions to a HIPAA Breach

By Art Gross – In 2007 the Guide to Medical Privacy Law was published. It indicated that on multiple occasions hospitals, EMT services, schools, and other public agencies were incorrectly withholding news out of a fear of violating HIPAA policy. Often, there isn’t a clear understanding as to what constitutes exceptions to HIPAA and who can say what.