The Health Insurance Portability and Accountability Act (HIPAA) mandates safeguards to be in place to secure protected health information (PHI). PHI is any individually identifying health information such as name, date of birth, financial information, and medical history. The incidents of healthcare organization hacks has increased exponentially over the last few years. As the most targeted sector of the U.S. economy, implementing HIPAA cyber security practices is essential to [...]

Implementing effective HIPAA cybersecurity measures is essential to safeguarding protected health information (PHI). However, according to a recent study conducted by Brigham Women's Hospital and Harvard Medical School, many healthcare organization employees remain undertrained in HIPAA cybersecurity awareness. The study authors analyzed HIPAA cybersecurity awareness by studying the results of phishing simulations ran by six healthcare institutions.  A simulated phishing test is conducted by an organization’s sending deceptive (although [...]

When choosing a new doctor many prospective patients look to previous patient reviews to determine if they should schedule an appointment with that practice, or go another direction. Additionally, providing testimonials on your practices website can be a key differentiator. Although reviews and testimonials can be great marketing tools for a doctor’s practice, it is important to keep HIPAA’s Privacy Rule in mind before you post anything.  HIPAA’s Privacy [...]

The terms “HIPAA risk analysis” and “HIPAA gap analysis” are commonly confused because they sound the same, and embody similar concepts. However, the two activities are unique, involve processes that are distinct from each other, and target different components of HIPAA compliance - so it’s important to avoid confusing them. What is a HIPAA Risk Analysis? A HIPAA risk analysis is required under the HIPAA Security Rule. [...]

WordPress makes it easier for those without website development knowledge to create their own websites. Having a website that current or prospective patients can view is a key component to running a successful business. However, if you’re a covered entity or healthcare vendor, you need to make sure that the web developer and content management system (CMS) you are using for your site is HIPAA complaint. As WordPress is one [...]