The Compliancy Group's HIPAA Blog

8 05, 2018

The CIA Triad: Confidentiality, Integrity, Availability for HIPAA

Frank Sivilli2018-05-09T13:33:30+00:00May 8th, 2018|

Confidentiality, integrity, and availability are essential components of any effective information security program. Sometimes referred to as the 'CIA triad,' confidentiality, integrity, and availability are guiding principles for health care organizations to tailor their compliance with the HIPAA Security Rule. HIPAA regulation sets specific guidelines for maintaining the privacy and security of protected health information (PHI). These guidelines are organized into a collection of HIPAA Rules. The HIPAA [...]

3 05, 2018

Another Criminal HIPAA Violation, Possible Jail Time

Frank Sivilli2018-05-31T16:51:58+00:00May 3rd, 2018|

Criminal HIPAA violations are becoming more and more commonplace--and this recent example proves that the risks may be growing. A gynecologist based out of Springfield, Massachusetts was convicted of a criminal violation of HIPAA, relating to the illegal distribution of protected health information (PHI) with pharmaceutical sales representatives. The physician received kick-backs from pharmaceuticals company, Warner Chilcott, amounting to $23,500. The physician purportedly shared confidential PHI with Warner [...]

4 04, 2018

Compliancy Group Sponsors NYU in NASA Robotics Competition

Frank Sivilli2018-04-04T11:45:16+00:00April 4th, 2018|

Compliancy Group is proud of our commitment to advocacy work--and this recent sponsorship continues that tradition. Compliancy Group has sponsored New York University's Tandon School of Engineering Robotic Design Team (NYU RDT) as they compete in the NASA Robotic Mining Competition 2018. The Competition takes place annually at the Kennedy Space Center in Cape Canaveral, Florida, from May 14th-May 18th, 2018. The NYU RDT is a collegiate research and [...]

8 03, 2018

How HIPAA and Marketing Intersect: Social Media, Websites, and Email Marketing

Frank Sivilli2018-06-25T17:08:58+00:00March 8th, 2018|

Whether you're a marketing firm looking to break into health care, or a practitioner looking to start an email marketing campaign, understanding HIPAA compliant marketing is absolutely essential to finding success in this increasingly digital age. The HIPAA Rules set specific regulatory standards that must be upheld during the marketing process. HIPAA marketing standards should form the backbone of any health care marketing effort. The reason HIPAA marketing standards [...]

17 02, 2018

Even Bankruptcy Doesn’t Save You From HIPAA Fines

Frank Sivilli2018-06-08T12:48:12+00:00February 17th, 2018|

The most recent HIPAA settlement out of the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) proves that care needs to be taken every step of the way to protect your business from HIPAA violation breaches and fines. The Illinois-based Filefax, Inc. was fined $100,000 to settle violations regarding improper document disposal. The fact that makes this case so different than any other HIPAA settlement [...]

13 02, 2018

Ransomware Causes Allscripts EHR Breach, HIPAA Violations

Frank Sivilli2018-03-21T13:47:16+00:00February 13th, 2018|

Ransomware breaches are becoming commonplace in healthcare settings, and this most recent attack is just another part of that pattern. Allscripts is an electronic health records (EHR) platform that provides services to hospitals, pharmacies, and ambulatory services across the country. In late January 2018, Allscripts was hit by a ransomware attack that shut down its Professionals EHR and Electronic Prescriptions for Controlled Substances (EPCS), among other services. Of the [...]

12 02, 2018

Blockchain Healthcare Technology: HIPAA Compliant?

Frank Sivilli2018-07-06T09:29:32+00:00February 12th, 2018|

With the surge of blockchain technology in healthcare and the recent rise in cryptocurrencies, questions are swarming about how else this innovative new technology can be used. Blockchain technology works by creating packets of information in the form of a "chain," linking one recipient of data to another. The data is encrypted in these packets, which can be accessed by anyone who holds a decryption key for a [...]

19 01, 2018

HIPAA Compliance Management: Not as Hard as you Think

Frank Sivilli2018-02-14T17:47:19+00:00January 19th, 2018|

When people think of HIPAA compliance management, they often think of a time consuming process involving piles of binders, unnecessary legwork, and costly legal fees. But what if there was a way to simplify your HIPAA compliance management? The truth is: using a HIPAA compliance software to address your compliance management is one of the most cost-effective ways to ensure that you're addressing the full extent of HIPAA [...]

30 11, 2017

How to Make Your Email HIPAA Compliant

Frank Sivilli2018-07-24T13:48:59+00:00November 30th, 2017|

If you are healthcare organization working with protected health information (PHI), you need to make sure all communication, storage, and transmission of PHI is HIPAA compliant. But what is HIPAA compliance, and what are the steps for email to become HIPAA compliant? To begin, let’s look at what HIPAA is and what's required for HIPAA compliance. What is HIPAA? HIPAA stands for the Health Insurance Portability and Accountability Act. [...]

14 11, 2017

HIPAA Compliance Training Requirements (for Free!)

Frank Sivilli2018-07-04T12:35:39+00:00November 14th, 2017|

HIPAA compliance training is an essential part of an effective compliance program. Annual employee training is mandated by HIPAA regulation. There are many misconceptions surrounding annual HIPAA training requirements that can leave your practice vulnerable to breaches and fines if they aren't properly remedied! Click here to get a free HIPAA training session for you and your employees right now! Your practice is faced with many options for HIPAA [...]