ePHI

New HIPAA Guidance on Ransomware Attacks and ePHI Security

By Bob Grant – HHS Office for Civil Rights has released new guidance about how HIPAA-beholden entities can better equip themselves to deal with ransomware attacks. Ransomware is a targeted kind of malware attack that takes data ‘hostage.’ The attackers responsible then give the organization a countdown to a time at which they expect to receive a ‘ransom’ in exchange for restored access to the withheld data.


When Does the HIPAA Conduit Exception Rule Apply?

By Gene Fry – The HIPAA conduit exception rule is only applicable to providers of purely conduit services who do not have access to protected health information (PHI) other than infrequently or randomly. For this reason, conduit providers do not have to sign a Business Associate Agreement (BAA). But what exactly is a conduit service, and when does the HIPAA conduit exception rule apply?



Don’t Become a Data Horror Story

As an IT professional in the healthcare industry, you know the importance — indeed, the legal necessity — of ensuring that your organization’s patient information remains protected at all times. That’s why we’ve consolidated 10 best practices for you, from healthcare IT thought leaders, in a new eFax Corporate® infographic