AMA/AHA Security Recommendations for Mitigating COVID-19 Cyber Risks: HIPAA & HITECH Act Blog by Jonathan P. Tomes
It isn’t exactly HIPAA, but because the Security Rule’s Security Management Process, 45 C.F.R. § 164.306(a), certainly requires covered entities and business associates to maintain .. read more
HIPAA Violations Are Still Mostly People, Not Technology: HIPAA & HITECH Act Blog by Jonathan P. Tomes
I learned a long time ago, when I served in that contradiction of terms, military intelligence, that the big risk, at that time to defense .. read more
HIPAA & CORONAVIRUS BLOG POST 4―Enforcement Discretion for Telehealth Remote Communications during the COVID-19 Nationwide Public Health Emergency: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Roger Severino, the Director of the Office for Civil Rights (“OCR”) of the U.S. Department of Health and Human Services (“HHS”) has announced that OCR .. read more
HIPAA and Working at Home in the Age of the Coronavirus: HIPAA & HITECH Act Blog by Jonathan P. Tomes
I got this question from an attendee of one of my recent HIPAA webinars: “We are a medical billing company in the State of [redacted]. .. read more
Being a Small Practice Won’t Save You from a HIPAA Penalty: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In the first enforcement action announced in 2020, the Department of Health and Human Services (“HHS”) has settled with Dr. Stephen A. Porter for $100,000 .. read more
HIPAA and Coronavirus: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In case you missed it, the Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”) recently issued a bulletin titled HIPAA Privacy .. read more
Jon Tomes Will Be Presenting an All-Day, Live, and In-Person HIPAA Seminar in San Francisco in 3 Weeks: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart, J.D.
If you will be in San Francisco about 3 weeks from now and need HIPAA compliance training, go to https://www.compliancekey.us/seminar-details?industryId=3&seminarid=36&speakerid=124 to sign up. The HIPAA .. read more
HHS Office for Civil Rights and the Department of Education Issue Updated Guidance on Sharing Student Health Records under HIPAA and FERPA: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Having had the good fortune to be a HIPAA consultant for several universities, I am quite aware of the confusion that could result from possibly .. read more
OCR Reveals Its Right of Access Enforcement Priorities: HIPAA & HITECH Act Blog by Jonathan P. Tomes
At a major annual HIPAA conference, Roger Severino, Director of the Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”), revealed its .. read more
HHS OCR Issues New Guidance for Malicious Workforce Threats: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The 2018 Protected Health Information Data Breach Report found that 58 percent of security incidents resulted from insiders rather than outsiders, such as hackers. Discussing .. read more