Second Draft of NIST Cybersecurity Framework Published: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The National Institute for Standards and Technology (“NIST”) has published its second draft of its revised Cybersecurity Framework (“the Framework”). Version 1.0 of the NIST .. read more
New Sample Media Policy for Our Blog Readers: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Merry Christmas! A Christmas Present from Jon and Alice Normally, we at Veteran’s Press and EMR Legal, our HIPAA publishing and consulting companies, reserve new .. read more
OCR Clarification on Aspects of Privacy Rule after Man-made Disasters: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The recent shooting attack in Las Vegas and other man-made disasters have prompted the Department of Health and Human Services (“DHHS”) Office for Civil Rights .. read more
NCCoE and NIST Guidelines for Ransomware Recovery: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Little doubt exists that ransomware is a major threat to the availability of health information. Ransomware is a type of malicious software from cryptovirology, a .. read more
DHHS Updates Guidance on Disclosures to Family Members: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The Privacy Rule, in 45 CFR§ 164.510(b), permits covered entities to disclose protected health information (“PHI”) to family members and even close personal friends who .. read more
First HIPAA Penalty for Failure to Comply with the HIPAA Breach Notification Rule: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The U.S. Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”) last week announced the first HIPAA settlement in lieu of a .. read more
Joint Commission Keeps Ban on Use of Secure Text Messaging for Patient Care Orders: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In its December 2016 newsletter, the Joint Commission (formerly known as “JCAHO”) specified that its ban on the use of secure text messaging platforms for .. read more
Help for Your New Year’s Resolution to Be HIPAA Compliant: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart
If one of your New Year’s resolutions is to finally become HIPAA compliant or to bring your HIPAA risk analysis, policies and procedures, and training .. read more
HIPAA and Texting: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart
You may wonder whether HIPAA allows your organization to engage in texting with your patients/clients and/or within your organization. HIPAA, of course, does not mention .. read more
New California Breach Notification Law: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Governor Jerry Brown recently signed into law a California bill regarding breach notification, A.B. 2828, amending California Civil Code §§ 1798.29(a) and 1798.82(a) so that, .. read more