HIPAA Privacy Rule: PHI Reidentification
Under the HIPAA Privacy Rule, de-identification of protected health information (PHI) is the removal of specific information about a patient that can be used alone or in combination with [...]
What is a HIPAA Security Official and Do I Need One?
Under the HIPAA Security Rule, covered entities and business associates are required to implement appropriate administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security [...]
PHI Protection: How to Secure Healthcare Data
Healthcare data breaches have been highlighted recently, with several large breaches occurring over the last few months. Hackers target the healthcare industry as they hold a wealth of sensitive [...]
Overconfidence in Healthcare Data Security Putting PHI at Risk
Integris researchers conducted a survey in which they asked healthcare leadership to assess their data privacy maturity. They surveyed 258 executives from mid to large organizations, and found that [...]
Be Careful Where You Click: COVID-19 Phishing Emails
There have been recent reports of hackers posing as the Center for Disease Control (CDC) and the World Health Organization (WHO) to bait people into clicking on phishing emails. [...]
Vendor Vetting Can Save You Millions
In a recent study conducted by the Ponemon Institute, it was determined that 54% of healthcare vendors had experienced at least one data breach affecting protected [...]
What to Do and How to Prevent Ransomware Attacks
Ransomware attacks are the most common type of malware incident in the healthcare industry, with 85% of all malware incidents classified as ransomware. A ransomware attack occurs when a [...]
What is the Integrity of ePHI Under the HIPAA Security Rule?
The HIPAA Security Rule requires that covered entities (health plans, healthcare clearinghouses, and healthcare providers who electronically transmit any health information in connection with a HIPAA related transaction) and [...]
The Amended Maryland Personal Information Protection Act (MPIPA)
The Maryland Personal Information Protection Act, known as MPIPA, was amended in April of 2019, by House Bill (HB) 1154. The amended law went into effect on October 1st [...]
What is PCI Compliance?
Payment card industry (PCI) compliance, also known as PCI compliance, refers to the standards with which businesses must comply to ensure protection of cardholder credit card data. PCI compliance [...]
