HIPAA Privacy Rule

Privacy vs. Security Rule

By Art Gross – When it comes to HIPAA compliance, it’s easy to feel as if you’re being pulled in a million different directions at once. In part, this could be due to the fact that there are 4 different rules that go into HIPAA: the Privacy Rule, the Security Rule, the Breach Notification Rule, and the Omnibus Rule.


Information Blocking Regulations Work in Concert with HIPAA Rules

By Rachel Nelson & Kathryn Marchesini – We often get asked about how ONC’s information blocking regulations and HHS’ Office for Civil Rights’ HIPAA Privacy, Security, and Breach Notification Rules interact with one another. To help clarify, ONC just released a few new information blocking FAQs that illustrate how the federal regulations interact.


Tracking Tools and Privacy Gaps

By Matt Fisher – You go to a website and begin looking around for a healthcare product. In the current times, that can mean searching for a prescription drug that is not permitted in certain states or trying to get easier access because going to a doctor’s office doesn’t fit in with a busy or really many regular schedules.



Take Care in Healthcare Marketing

By Matt Fisher – The Office for Civil Rights recently provided new lessons when it comes to mixing healthcare marketing and HIPAA. In this case, marketing is being looked at broadly to include not just communications or interactions about an organization subject to HIPAA, but also limits on the use of patient information outside the bounds of the organization.




Applying HIPAA to Digital Health

By Matt Fisher – The aim of the recent Getting Back to Basics post was to re-establish the key fundamentals of how HIPAA operates. To summarize in a sentence, HIPAA applies to certain defined entities working or interacting with healthcare information related to an individual.