HIPAA

Telehealth waivers during the COVID-19 public health emergency are expiring.

Emailing patient information can be HIPAA compliant. However there are risks that you should be cognizant of and steps to take to minimize the chance of a HIPAA violation.

Understand the implications working from home or remote access has on maintaining HIPAA compliance in the office.

HIPAA prohibits the sharing of patient information except in certain cases. You are allowed to share information for law enforcement purposes.

Many cybersecurity events and breaches are the result of us failing to keep our computers and computer programs up to date. The process of keeping our systems up to date is known as PATCHING.

A HIPAA breach has lasting impacts. A breach will trigger an investigation and may result in civil penalties. A breach can erode the patient trust in the provider and the medical community. A breach also opens your office up for litigation.

There are many different personal health applications that individuals are using. As a provider, you are responsible for using secure applications. However many personal health applications will not fall under HIPAA guidelines. Before using these applications, understand how they protect the privacy of their users.

Maui ransomware is another ransomware attack on healthcare systems. These attacks are targeting healthcare organizations anticipating they are more likely to pay the ransom. Understand what your office can do to mitigate the chance of getting hit with a ransomware attack.

Investigations and audits are being triggered by patient complaints. One such complaint that was investigated by OCR cost the office $28,000 and were found to be violating several HIPAA regulations.

The Supreme Court ruling on Roe emphasizes the importance on understanding patient's rights to the privacy of their information. HHS has provided guidance following this ruling to best understand what providers roles are regarding patient's health information.