HIPAA

The time for healthcare organizations to undertake a review of their operations is now-OCR anticipates that its long-awaited HIPAA compliance audit program will be under way this fall.

A long-awaited notice of proposed rulemaking (NPRM) required by HITECH for accounting of disclosures includes some anticipated changes and some surprises.

Social networking and its related communication ­vehicles pose significant privacy and security challenges for healthcare organizations, says Chris Apgar, CISSP.

Q Is it permissible to allow hospital employees who have been granted access to PHI through the workforce clearance procedure to access their own PHI through the electronic medical record (EMR) without first signing a release or authorization?

HITECH was the trigger for a global HIPAA policy review at North Shore-Long Island Jewish Health System (North Shore-LIJ) in Great Neck, NY. This was no easy task; North Shore-LIJ includes a medical school, a research institute, 15 hospitals, more than 200 ambulatory care centers, over 5,600 beds, and a total workforce of more than 42,000 employees.

Just three weeks before a devastating tornado roared through Joplin, MO, St. John's Regional Medical Center transitioned to an electronic health record (EHR) system that it credits with aiding its disaster recovery.

You've got HIPAA questions. We've got answers.

Test staff knowledge of HIPAA with these questions.

When Raj Chaudhary, MS, PE, CGEIT, goes into hospitals, there are five HIPAA privacy and security compliance gaps he typically finds.

If patients had concerns about the ability of healthcare organizations to protect their ePHI, two government reports released in May did nothing to alleviate their fears.