HIPAA

Under the HITECH Act, passed in 2009, the secretary is required to post all breaches affecting 500 or more patients to the internet. This applies to all medical providers and Business Associates. This web site is commonly referred to as the HIPAA Wall of Shame. You can find it at https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf

Telehealth waivers during the COVID-19 public health emergency are expiring.

Emailing patient information can be HIPAA compliant. However there are risks that you should be cognizant of and steps to take to minimize the chance of a HIPAA violation.

Understand the implications working from home or remote access has on maintaining HIPAA compliance in the office.

HIPAA prohibits the sharing of patient information except in certain cases. You are allowed to share information for law enforcement purposes.

Many cybersecurity events and breaches are the result of us failing to keep our computers and computer programs up to date. The process of keeping our systems up to date is known as PATCHING.

A HIPAA breach has lasting impacts. A breach will trigger an investigation and may result in civil penalties. A breach can erode the patient trust in the provider and the medical community. A breach also opens your office up for litigation.

There are many different personal health applications that individuals are using. As a provider, you are responsible for using secure applications. However many personal health applications will not fall under HIPAA guidelines. Before using these applications, understand how they protect the privacy of their users.

Maui ransomware is another ransomware attack on healthcare systems. These attacks are targeting healthcare organizations anticipating they are more likely to pay the ransom. Understand what your office can do to mitigate the chance of getting hit with a ransomware attack.

Investigations and audits are being triggered by patient complaints. One such complaint that was investigated by OCR cost the office $28,000 and were found to be violating several HIPAA regulations.