Medical Device Security and HIPAA: A New Security Frontier. HIPAA & HITECH Act Blog by Jonathan P. Tomes
When one thinks about hackers going after electronic health information for identity theft or other nefarious purposes, one thinks about them attacking the electronic health .. read more
Hospital Patients Targeted in Scam: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Identity thieves have been conducting a telephone phishing (originally defined as the fraudulent practice of sending emails purporting to be from reputable companies in order .. read more
DHHS Updates Guidance on Disclosures to Family Members: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The Privacy Rule, in 45 CFR§ 164.510(b), permits covered entities to disclose protected health information (“PHI”) to family members and even close personal friends who .. read more
First HIPAA Penalty for Failure to Comply with the HIPAA Breach Notification Rule: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The U.S. Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”) last week announced the first HIPAA settlement in lieu of a .. read more
Joint Commission Keeps Ban on Use of Secure Text Messaging for Patient Care Orders: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In its December 2016 newsletter, the Joint Commission (formerly known as “JCAHO”) specified that its ban on the use of secure text messaging platforms for .. read more
Help for Your New Year’s Resolution to Be HIPAA Compliant: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart
If one of your New Year’s resolutions is to finally become HIPAA compliant or to bring your HIPAA risk analysis, policies and procedures, and training .. read more
HIPAA and Texting: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart
You may wonder whether HIPAA allows your organization to engage in texting with your patients/clients and/or within your organization. HIPAA, of course, does not mention .. read more
Watch Out for a Fake OCR Audit Phishing Email: HIPAA & HITECH Act Blog by Jonathan P. Tomes
On November 28, the Department of Health and Human Services (“DHHS”) warned that a marketing campaign has been circulating a fake OCR audit phishing email .. read more
New California Breach Notification Law: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Governor Jerry Brown recently signed into law a California bill regarding breach notification, A.B. 2828, amending California Civil Code §§ 1798.29(a) and 1798.82(a) so that, .. read more
Children’s Health Records and You: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Parents who have minor children have legitimate concerns about their children’s health records as used, disclosed, and maintained by their health care providers, insurers, and .. read more