The Department of Health and Human Services (HHS) sent out a bulletin on February 3 to remind hospitals of information-sharing protocols when dealing with an outbreak of infectious disease or an emergency situation such as the novel coronavirus.
Education and training are critical components of an effective compliance plan. Training and education serve to set the tone for the compliance program and the ethics of the organization.
A large HIPAA breach settlement after a hospital system’s alleged failure to follow the feds’ suggested solution is a reminder that when it comes to enforcement, the government is holding all the cards.
Q: In OCR's $3 million settlement with Touchstone Medical Imaging, one of Touchtone's FTP servers allowed uncontrolled access to patients’ PHI. This permitted search engines to index the PHI of patients, which remained visible even after the server was taken offline. What missteps can providers avoid in this arena?
A Texas-based healthcare company reached a voluntary resolution agreement with HHS and the Office for Civil Rights (OCR) on January 16 regarding allegations that it had failed to provide effective communication to hearing-impaired patients.
While the Privacy Rule applies to various types of health information, the Security Rule only applies to electronic protected health information (ePHI). The major goal of the Security Rule is to ensure proper safeguards are in place for the storing, maintaining, and transmission of ePHI.
With 2020 underway, it’s a good time for facilities to review the standards set forth by the rules that define HIPAA regulations. Without a thorough understanding throughout an organization, it can be easy for violations to occur.
