Handling Patient Reviews in a HIPAA Compliant Manner
When choosing a new doctor many prospective patients look to previous patient reviews to determine if they should schedule an appointment with that practice, or go [...]
The Difference Between HIPAA Risk Analysis and Gap Analysis
The terms “HIPAA risk analysis” and “HIPAA gap analysis” are commonly confused because they sound the same, and embody similar concepts. However, the two activities are [...]
Is WordPress HIPAA Compliant?
WordPress makes it easier for those without website development knowledge to create their own websites. Having a website that current or prospective patients can view is a key component [...]
HIPAA Audits: 3 Lessons Learned
The Health Insurance Portability and Accountability Act (HIPAA) dictates healthcare standards for how protected health information (PHI) is handled and safeguarded. The Department of Health and [...]
Double Trouble: Indiana Engineering Company Hit with Federal AND Multistate Data Breach Fines
Medical Informatics Engineering, Inc. (MIE) is an Indiana-based company that develops and offers solutions enabling the exchange of electronic protected health information (ePHI). In May of [...]
Lack of Access Management Results in GDPR Fine
Similar to the United States’ HIPAA law, the General Data Protection Regulation (GDPR), enacted in 2016, protects Europeans’ personal data. HIPAA and GDPR require many of [...]
Business Associate Security: What is Your Responsibility as a Covered Entity
In light of recent large-scale breaches in healthcare, it is imperative that covered entities (CEs) understand the importance of business associate security. Over the course of [...]
HIPAA Privacy and Security Do Not Cover Health Apps Compliance
With the fast adaptation of technology in healthcare, such as wearable technology and genetic testing kits, protecting private health information has become increasingly important. Currently the HIPAA Privacy and [...]
Ransomware Attack on California Health and Wellness Center Leaves Up to 21,500 Exposed
California-based Shingle Springs Health and Wellness Center provides medical, behavioral, dental, and pharmaceutical services. On April 7, 2019, the center discovered that its server had become [...]
New Business Associate HIPAA Guidelines Released by OCR
The Department of Health and Human Services (HHS) Office of Civil Rights (OCR) released new HIPAA guidelines for business associate requirements in May 2019. These guidelines [...]
