HIPAA and HITRUST: What’s the Difference?
HIPAA and HITRUST are acronyms that sound alike, and are related. However, the two terms, HIPAA and HITRUST, embody different things. So what is the difference between HIPAA [...]
Nevada Consumer Privacy Law Allows for Opt-Out of Sale of Covered Information
In May of 2019, the Governor of Nevada approved Senate Bill 220 (SB 220), an updated Nevada consumer privacy law. This legislation, which becomes effective on [...]
The Integrity of ePHI Under HIPAA Security Rule
The HIPAA Security Rule requires that covered entities (health plans, healthcare clearinghouses, and healthcare providers who electronically transmit any health information in connection with a HIPAA-related [...]
Employee of DBHIDS Loses Unencrypted Laptop Resulting in HIPAA Breach
An employee of Philadelphia’s Department of Behavioral Health and Intellectual disAbility Services (DBHIDS) lost an unencrypted laptop on public transportation. The laptop contained the protected health information (PHI) of [...]
HIPAA Breaches Rising
HIPAA breaches have increased exponentially as health information is extremely valuable on the black market. It seems like there is a new data breach in the news every day, [...]
Cryptomining Malware Can Affect HIPAA Obligations
The well-established security firm Check Point recently ranked cryptomining as the leading cyber threat in healthcare - ahead of ransomware. Cryptomining malware, also known as cryptocurrency mining malware, refers [...]
183,000 Patients Affected in the Latest String of Healthcare Phishing Attacks
Presbyterian Healthcare Services is the latest victim of phishing attacks in the healthcare industry. A healthcare phishing attack occurs when unauthorized access to an organization's network is gained by [...]
HIPAA Cybersecurity Practices
The Health Insurance Portability and Accountability Act (HIPAA) mandates safeguards to be in place to secure protected health information (PHI). PHI is any individually identifying health information such as [...]
Healthcare Organizations and HIPAA Cybersecurity
Implementing effective HIPAA cybersecurity measures is essential to safeguarding protected health information (PHI). However, according to a recent study conducted by Brigham Women's Hospital and Harvard Medical School, many [...]
Lack of Access Management Results in GDPR Fine
Similar to the United States’ HIPAA law, the General Data Protection Regulation (GDPR), enacted in 2016, protects Europeans’ personal data. HIPAA and GDPR require many of [...]
