HIPAA Compliance

Breaches, Breaches, Everywhere

By Matt Fisher – It often seems as though a day does not go by without the report of a new breach of healthcare data. Examples of breaches include loss of unencrypted devices (whether laptops, flash drives or other devices), usage of non-secure services, inattention to paper records, employee snooping, and more.

Read More

It’s Not Just Large Data Breaches That Matter

By Jonathan Krasner – We are all well aware of the epidemic of large data breaches that have been occurring recently. Anthem, Blue Cross, UCLA, the list goes on and on. Over 143 million records breached to date – an astounding figure! Since 2009, when the Office of Civil Rights “Wall of Shame” came into existence, there have been over 1,200 breaches of 500 records or more that have been reported.



HIPAA Criminal Violations on the Rise

By Matt Fisher – Stories appear almost everyday about medical records being improperly accessed, hacked or otherwise being stolen. The number of stories about such thefts is almost matched by the number of stories about the high value placed upon medical records by identity thieves and others.


Training: A Necessary and Essential Part of HIPAA Compliance

By Matt Fisher – The increased focus on HIPAA compliance and anticipated second round of audits makes clear the necessity for an organization to develop and implement comprehensive policies and procedures. The many settlement and breach announcements demonstrate that many issues occur because individuals do not fully understand what HIPAA is or what it does. A lack of knowledge, however, can be combatted though with good training



Compliance and Security of PHI Build a Trustworthy Framework in Healthcare

By Lee Barrett – Some say there’s nothing like a little controversy to spark interest in your organization. Others say there’s no such thing as bad publicity. Call me old fashioned, but I contend, in healthcare, being featured on the Office for Civil Rights’ Wall of Shame or plastered on a news headline about a breach of personal health information (PHI) bad publicity, bad business and bad medicine.