The Compliancy Group's HIPAA Blog

4 04, 2018

Compliancy Group Sponsors NYU in NASA Robotics Competition

Frank Sivilli2018-04-04T11:45:16+00:00April 4th, 2018|

Compliancy Group is proud of our commitment to advocacy work--and this recent sponsorship continues that tradition. Compliancy Group has sponsored New York University's Tandon School of Engineering Robotic Design Team (NYU RDT) as they compete in the NASA Robotic Mining Competition 2018. The Competition takes place annually at the Kennedy Space Center in Cape Canaveral, Florida, from May 14th-May 18th, 2018. The NYU RDT is a collegiate research and [...]

8 03, 2018

How HIPAA and Marketing Intersect: Social Media, Websites, and Email Marketing

Frank Sivilli2018-06-25T17:08:58+00:00March 8th, 2018|

Whether you're a marketing firm looking to break into health care, or a practitioner looking to start an email marketing campaign, understanding HIPAA compliant marketing is absolutely essential to finding success in this increasingly digital age. The HIPAA Rules set specific regulatory standards that must be upheld during the marketing process. HIPAA marketing standards should form the backbone of any health care marketing effort. The reason HIPAA marketing standards [...]

17 02, 2018

Even Bankruptcy Doesn’t Save You From HIPAA Fines

Frank Sivilli2018-06-08T12:48:12+00:00February 17th, 2018|

The most recent HIPAA settlement out of the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) proves that care needs to be taken every step of the way to protect your business from HIPAA violation breaches and fines. The Illinois-based Filefax, Inc. was fined $100,000 to settle violations regarding improper document disposal. The fact that makes this case so different than any other HIPAA settlement [...]

13 02, 2018

Ransomware Causes Allscripts EHR Breach, HIPAA Violations

Frank Sivilli2018-03-21T13:47:16+00:00February 13th, 2018|

Ransomware breaches are becoming commonplace in healthcare settings, and this most recent attack is just another part of that pattern. Allscripts is an electronic health records (EHR) platform that provides services to hospitals, pharmacies, and ambulatory services across the country. In late January 2018, Allscripts was hit by a ransomware attack that shut down its Professionals EHR and Electronic Prescriptions for Controlled Substances (EPCS), among other services. Of the [...]

12 02, 2018

Blockchain Healthcare Technology: HIPAA Compliant?

Frank Sivilli2018-07-06T09:29:32+00:00February 12th, 2018|

With the surge of blockchain technology in healthcare and the recent rise in cryptocurrencies, questions are swarming about how else this innovative new technology can be used. Blockchain technology works by creating packets of information in the form of a "chain," linking one recipient of data to another. The data is encrypted in these packets, which can be accessed by anyone who holds a decryption key for a [...]

19 01, 2018

HIPAA Compliance Management: Not as Hard as you Think

Frank Sivilli2018-02-14T17:47:19+00:00January 19th, 2018|

When people think of HIPAA compliance management, they often think of a time consuming process involving piles of binders, unnecessary legwork, and costly legal fees. But what if there was a way to simplify your HIPAA compliance management? The truth is: using a HIPAA compliance software to address your compliance management is one of the most cost-effective ways to ensure that you're addressing the full extent of HIPAA [...]

30 11, 2017

How to Make Your Email HIPAA Compliant

Frank Sivilli2018-07-24T13:48:59+00:00November 30th, 2017|

If you are healthcare organization working with protected health information (PHI), you need to make sure all communication, storage, and transmission of PHI is HIPAA compliant. But what is HIPAA compliance, and what are the steps for email to become HIPAA compliant? To begin, let’s look at what HIPAA is and what's required for HIPAA compliance. What is HIPAA? HIPAA stands for the Health Insurance Portability and Accountability Act. [...]

14 11, 2017

HIPAA Compliance Training Requirements (for Free!)

Frank Sivilli2018-07-04T12:35:39+00:00November 14th, 2017|

HIPAA compliance training is an essential part of an effective compliance program. Annual employee training is mandated by HIPAA regulation. There are many misconceptions surrounding annual HIPAA training requirements that can leave your practice vulnerable to breaches and fines if they aren't properly remedied! Click here to get a free HIPAA training session for you and your employees right now! Your practice is faced with many options for HIPAA [...]

10 11, 2017

The Gap Between EHR and HIPAA Compliance

Frank Sivilli2018-05-24T11:28:32+00:00November 10th, 2017|

In today's health care market, there's a growing disconnect between EHRs and HIPAA compliance. The misconceptions surrounding requirements for EHRs and HIPAA compliance under the law have lead many health care professionals into hot water with HIPAA breaches and violation fines. Both are essential parts of running a successful business in health care. EHR platforms give your practice a secure, care-focused means of maintaining protected health information (PHI), such [...]

2 11, 2017

What is 45 CFR 164.524? Rules for Individual Access to PHI

Frank Sivilli2018-06-25T16:50:47+00:00November 2nd, 2017|

45 CFR 164.524 is a section of the HIPAA Privacy Rule that explains the standards regarding patient access to protected health information (PHI). PHI is any demographic information that can be used to identify a patient. Examples of PHI according to HIPAA regulation includes names, addresses, dates of birth, Social Security numbers, medical records, financial information, and full facial photographs, to name a few. The HIPAA CFR Privacy Rule [...]