Compliancy Group

OCR Enforcement Discretion for Business Associate PHI Use

The Department of Health and Human Services’ (HHS) Office for Civil Rights, as part of a broad response to support federal and state health authorities and emergency operations centers who need access to COVID-19-related data, has announced it will exercise additional COVID-19-related enforcement discretion. The OCR enforcement discretion is discussed below. What Enforcement Discretion Will be Exercised? Previously, OCR announced it would [...]

2023-07-31T15:55:03-04:00September 1st, 2020|
Read More

HIPAA Workforce Definition

The HIPAA workforce definition is critical to understanding which entities a covered entity must enter into business associate agreements with. The HIPAA workforce definition is discussed below.  The HIPAA Workforce Definition: What is it? The HIPAA workforce definition, if properly understood, will make it easier for covered entities to determine whom they need to enter into business associate agreements with. The “workforce” of a covered [...]

2023-08-01T09:04:46-04:00May 22nd, 2020|
Read More

Vendor Vetting Can Save You Millions

In a recent study conducted by the Ponemon Institute, it was determined that 54% of healthcare vendors had experienced at least one data breach affecting protected health information (PHI). However, healthcare providers are continually neglecting their obligation to adequately vet vendors they are working with. It was found that although many healthcare providers somewhat address their vendor vetting obligation by sending risk assessment questionnaires, 41% [...]

2023-08-01T10:58:19-04:00March 12th, 2020|
Read More

When is a Covered Entity Liable for a Business Associate Breach?

Under the HIPAA Privacy Rule, a covered entity may, in some circumstances, be liable for its business associate breach under the business associate agreement.  When May a Covered Entity be Liable for a Business Associate Breach of the Business Associate Agreement? A covered entity may be liable for business associate misconduct or violations when: The covered entity knew of a pattern of activity or practice [...]

2023-08-01T13:48:19-04:00January 21st, 2020|
Read More

HIPAA Cloud Service Providers

Cloud service providers (CSP) are businesses that provide network services, business applications, or infrastructure, in the cloud. The services are hosted in a remote data center that can be accessed through a company network connection. Cloud service providers that create, receive, maintain, or transmit electronic protected health information (ePHI) on behalf of a covered entity or business associate, are considered HIPAA business associates. HIPAA cloud service providers must [...]

2023-08-01T14:00:49-04:00January 8th, 2020|
Read More

Is Google Sheets HIPAA Compliant?

Google Sheets is a web-based spreadsheet offered by Google within its Google Drive service. It was first released in 2007. The issue of Is Google Sheets HIPAA Compliant is discussed below. How Can Google Sheets Become HIPAA Compliant? If you are asking yourself “Is Google Sheets HIPAA Compliant?” then the issue of how Google Sheets is regulated by HIPAA must be addressed first. HIPAA regulations [...]

2023-08-07T11:53:59-04:00December 3rd, 2019|
Read More

Is OneDrive HIPAA Compliant?

The convenience of using cloud storage has caused many businesses to use the technology. In the healthcare industry, the ability to quickly access patient’s protected health information (PHI) from various systems is important. However, when choosing a cloud provider, organizations working in healthcare must ensure that the service is HIPAA compliant. Is OneDrive HIPAA compliant? HIPAA Business Associates Agreements The Health Insurance [...]

2023-08-07T14:16:25-04:00November 1st, 2019|
Read More

Is Google Drive HIPAA Compliant?

With the ever-growing importance of data privacy and security, it's no wonder that many healthcare organizations are asking the question: "Is Google Drive HIPAA compliant?" As one of the world's most popular cloud-based storage solutions, millions of people use Google Drive daily to store and share their personal and professional documents. But when it comes to handling sensitive medical information, can we trust that this platform [...]

2023-08-07T15:05:34-04:00September 27th, 2019|
Read More

3 Easy Steps to Get your Microsoft Business Associate Agreement

The Health Insurance Portability and Accountability Act (HIPAA) set forth industry standards for the handling of protected health information (PHI). PHI is any individually identifying health information such as name, date of birth, treatment information, Social Security number, etc. Under HIPAA, any organization working with PHI, in any capacity, must be HIPAA compliant. This includes covered entities (CEs) and the vendors that service them. Before a CE can [...]

2023-08-07T15:41:54-04:00August 29th, 2019|
Read More

Florida HIPAA Fine: No BAA Results in $500,000 Fine

A recent $500,000 Florida HIPAA fine is just another example of the growing trend of HIPAA violations cropping up across the country, all stemming from the lack of properly executed business associate agreements. Advanced Care Hospitalists PL (ACH) has agreed to pay a $500,000 HIPAA fine to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) after a HIPAA investigation [...]

2023-08-08T08:51:43-04:00March 5th, 2019|
Read More
Our Product
Features
Company
HIPAA Seal of Compliance

LinkedIn

Facebook

Twitter

Youtube

instagram

Resources
Featured Case Studies
From Our Blog
Get in Touch

G2