Risk Analysis and Risk Assessment: Are They Different? HIPAA & HITECH Act Blog by Jonathan P. Tomes
Quite often, my HIPAA clients and those who read my blog ask what the difference is between a risk analysis and a risk assessment. In .. read more
Keep Those Tracking Numbers! HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Legal Editor Alice M. McCart
Have you ever wondered whether the package that you had sent via FedEx, USPS, UPS, or otherwise had arrived and wished that you had kept .. read more
Accounting for Disclosures Rule Delay: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Have you been worrying about how to comply with the accounting for disclosures rule that the Department of Health and Human Services (“DHHS”) published way .. read more
Appendix A to the Business Associate Agreement: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Often, my office gets calls and emails asking what Appendix A is to such an agreement and what should it say. We get these questions .. read more
New Mental and Behavioral NOPP in Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Some of our mental and behavioral health practitioner clients had asked for a sample notice of privacy practices (“NOPP”) that incorporates the special, more stringent .. read more
Michigan Proposed Law Would Comport with HIPAA: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Michigan proposed law to amend the Mental Health Code would authorize the Department of Community Health or a community mental health services program to disclose .. read more
California News re Health Information Privacy and Security and HIPAA Breach Notification Rule: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In October 2014, Kamala D. Harris, Attorney General, California Department of Justice, released the California Data Breach Report. The report noted that, in the health .. read more
Will HIPAA Let You Report a Suspected Ebola Case to Public Health Officials? HIPAA & HITECH Act Blog by Jonathan P. Tomes
If you encounter a patient that you suspect may have ebola, do you want to waste time wading through the HIPAA Privacy Rule to figure .. read more
MA AG Settles Cross-border HIPAA and Breach Notification Enforcement Suit: HIPAA & HITECH Act Blog by Jonathan P. Tomes
So only the state attorney general in the state in which you do business can file a lawsuit against you? Right? No, wrong. A Rhode .. read more
Hands-on HIPAA Compliance Workshop: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Is your organization’s HIPAA compliance lost at sea? As you may know, EMR Legal, Inc., is offering our 2-day Hands-on HIPAA Workshop October 16-17 aboard .. read more