HIPAA

Tips from this month's issue.

Tips from this month's issue.

A new OCR video training module educates providers on patients’ right of access under HIPAA.

Q: I work at a continuing care retirement community. The marketing department and resource development staff want a daily census so they can visit donors, would-be donors, or possible candidates for buying in to our community. Is this acceptable? It seems to go beyond the minimum necessary standard.

Q: Is it necessary to log an accounting of disclosures for state-related mandatory reporting? Should it be logged for billing purposes?

Anthem, Inc., an Indianapolis-based insurer, agreed to pay a record-setting $115 million to settle a class action lawsuit filed over a 2015 breach that affected 78.8 million individuals, Bloomberg

This month's HIPAA Q&A answers readers' questions about medical record requests, disposing of paper documents, and HIPAA training requirements.

Today's cybersecurity challenges call for a modern security incident and event monitoring solution.

Consumer-facing health apps and personal health records are booming, and some covered entities such as health plans or clinics leverage these services to help patients. But it can sometimes be difficult to determine whether these vendors fall under HIPAA or not.

Covered entities rely on business associates to provide vital services, but the relationship can be a compliance minefield.