The single most common way Protected Health Information (PHI) is compromised is through the loss of devices themselves, whether this happens by accident or by theft. Technology — thumb drives, CDs, smart phones, tablets — has made it possible for large amounts of information to be tucked into our pockets or purses and carried to […]
The Basics of Mobile Device Security for Protected Health Information Read More »
When it comes to safeguarding Protected Health Information (PHI), you could say, “It takes a village.”  The Omnibus Rule underscores the fact that protecting patients’ health information and their right to privacy is the responsibility today not only of healthcare providers, but also of their business associates (BAs) whose work requires them to access PHI.
Basics of a Good Business Associate Agreement for HIPAA Read More »
In your line of work, people come to you every day with symptoms. Chest pains. Chills. Blurred vision. Toothaches. And every day you draw on your years of medical, optometry, or dental training and your skills as a diagnostician to figure what’s wrong and how to fix it. As a healthcare professional, it’s what you
6 Symptoms of a Possible Computer Virus Read More »
Fact: According to the latest HIPAA and Breach Enforcement Stats from the Office of Civil Rights (the arm of Health and Human Services responsible for HIPAA enforcement), theft is the leading cause of reported breaches. Last year, as a direct result of a breach report of a stolen unencrypted laptop, Concentra Health Services paid OCR
Basic Guide to Thwarting Theft of Protected Health Information Read More »
Strange as it might seem, HIPAA compliance and the New York City sewer system share a connection. Both have given rise to “stories with little or no supporting evidence that spread spontaneously in varying forms and often have elements of humor, moralizing, or horror” — in other words, both contain  the stuff of “urban legends.”
Urban Legends & the HIPAA Risk Analysis Read More »
“The times they are a changin’,” Bob Dylan sang in the Sixties. And they still are, especially when it comes to HIPAA and its regulaltions regarding Business Associate Agreements. The Omnibus Rule that went into effect in September of 2013 makes it clear that business associates of healthcare practices now have to comply with many
Having Business Associate Agreements Can Save a Healthcare Office Boku Bucks Read More »
Are patient sign-in sheets HIPAA compliant? In most cases, yes. In some cases, no. Let’s take a quick look at both, starting with the HIPAA Privacy Rule itself. The goal of that law is to ensure that you and your staff take appropriate steps to protect your patients’ privacy. The creators of the Privacy Rule
What the HIPAA Privacy Rule Says about Patient Sign-In Sheets Read More »
The computers in your office are veritable treasure chests of information cyber pirates would love to get their hands on. Only authorized personnel in a practice should have the keys to unlock what’s inside.  Passwords as those keys. They play an important role in protecting Electronic Health Records (EHR) and the vital information those records
Can You Keep a Secret? 9 Tips for Creating Strong Passwords. Read More »
My brother-in-law retired a few years ago after more than three decades in private practice. He ran his busy office the old fashioned way — without computers. His patients’ records were kept in manila folders filed in a wall of shelves. In longhand, his office manager recorded appointments in a big black book and
How to Prepare for the Risk Assessment HIPAA Requires Read More »
This short blog is going to point you in the direction of a good HHS video about the security of EHR  and a good popcorn to go with it. I’ve always loved popcorn. Who doesn’t? I remember my mom sprinkling the kernels into the hot oil in a heavy-duty kettle on our kitchen stove, slapping
Best Popcorn for Watching a Short HIPAA Video about Security of EHR Read More »
