The HIPAA Security Rule mandates that covered entities must conduct a security risk assessment or SRA. This includes health care plans for individuals, government plans (Medicare, Medicaid, Obamacare), and employer-sponsored plans. Providers that conduct electronic health care transactions must comply with the Security Rule. This means conducting an SRA. It is recommended that this occurs...
The HHS Office for Civil Rights (OCR) has announced resolutions regarding three HIPAA violation investigations. These settlements result from a years-long emphasis on enforcing this regulation by the OCR. There were three dental practices that were given fines with regard to the potential violation of the HIPAA Privacy Rule’s patient right of access. Recently appointed...
What Are the Most Common Healthcare Breaches? When it comes to protecting your business, the approach needs to extend beyond the locks on the doors. Cyber threats are the highest risk to your patient and data security. So what are the most common healthcare breaches that you should be on the lookout for regularly? Ransomware...
Is Your Trash a HIPAA Violation? In the case of the New England Dermatology and Laser Center (NEDLC), their trash was a violation. And a costly one with a $300,640 fee attached. A security guard found a container with identifying information on the attached label. As a result, an investigation by the Department of Health...
Healthcare businesses need to be aware of the requirements that come with a cybersecurity insurance policy. In a world of online profiles, splashy websites, and great social media campaigns, businesses can misrepresent themselves in more ways than one. A great photo of your team or a full biography may help create patient trust, but it...
HIPAA Compliant Chat Being available to your patients 24/7 isn’t practical for most healthcare practices. Chat services can provide a response option or even resolution until normal business hours resume. Additionally, chats can offer initial patient care or registration services. As a HIPAA-covered entity or business associate, you must consider compliance when offering this service....
An Indirect Hit The NHS, or National Health Service, is the publicly funded healthcare system for the United Kingdom. They are supported by Advanced who is a managed service provider (MSP). Healthcare companies may outsource their IT departments to other companies to manage the cybersecurity and technical aspects of the business. This allows them to...
Portability in HIPAA There are many aspects of HIPAA. And sometimes there isn’t a clear understanding of what it covers. We also find that it is the “P” that often trips people up. Because of the strong emphasis on confidentiality, security, and safe handling of information, there is an assumption that the word Privacy is...
Health Care Cybersecurity Update on Guidance The National Institute of Standards and Technology (NIST) has provided updated guidance for the health care industry. Designed to help with electronically protected health information (ePHI), they have created a new draft titled Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide (NIST Special...
This year marks the 32nd anniversary of the signing of the Americans with Disabilities Act, known as ADA. This Act is in place to prohibit discrimination against any qualified individual. As outlined on the ADA National Network site, it ‘is a civil rights law that prohibits discrimination against individuals with disabilities in all areas of...
© 2026 · HIPAA Secure Now!
Recent Comments