Is the “Pending Doom” of Windows XP a HIPAA Violation? HIPAA & HITECH Act Blog by Jonathan P. Tomes
Many, primarily IT vendors, have stated that the pending doom of Windows XP, in which Microsoft will no longer support it after April 8, 2014, .. read more
DHHS Issues Final Rule Regarding Patient Right to Lab Results: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Yesterday, three agencies within the Department of Health and Human Services (“DHHS”) jointly issued the final rule to give patients (or persons designated by the .. read more
New Wall of Shame Format: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Before discussing the new format, note that almost 800 covered entities are now memorialized, so to speak, on the Big Breacher website (my name for .. read more
OIG Slams DHHS Again for Not Enforcing HIPAA Adequately! HIPAA & HITECH Act Blog by Jonathan P. Tomes
On November 21, 2013, the Department of Health and Human Services (“DHHS”) Office of the Inspector General (“OIG”) issued another scathing report about the DHHS .. read more
Covered Entity Hires Me to Respond to OCR Investigation—No Violation, Case Closed! HIPAA & HITECH Act Blog by Jonathan P. Tomes
A covered entity hired me to respond to an Office for Civil Rights (“OCR”) Complaint Investigation that alleged that the entity was not in compliance .. read more
Insurance for HIPAA Violations? HIPAA & HITECH Act Blog by Jonathan P. Tomes
A Premium Member asked me what I recommended for the policy limits for insurance for HIPAA violations. Without obtaining a lot more information, such as .. read more
Unintended Financial Consequences? Well, Maybe It’s Job Security: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In my recent article for the Journal of Healthcare Finance, “The Law of Unintended (Financial) Consequences: The Expansion of HIPAA Business Associate Liability,” which is .. read more
Still Not Convinced That You Need HIPAA Policies, Procedures, and Training? HIPAA & HITECH Act Blog by Jonathan P. Tomes
I hope that you have read my previous blog posts, particularly those recounting that the Department of Health and Human Services (“DHHS”) Office for Civil .. read more
Not-for-profit to Settle Copier HIPAA Breach with DHHS: HIPAA & HITECH Act Blog by Jonathan P. Tomes
According to a press release from the U.S. Department of Health and Human Services (“DHHS”), Affinity Health Plan, Inc., a not-for-profit managed care plan in .. read more
WellPoint, Inc., Reports Breach to DHHS, Settles for $1.7 Million: HIPAA & HITECH Act Blog by Jonathan P. Tomes
WellPoint, Inc., an Indiana managed care organization, reported under the requirements of the HITECH Act Breach Notification Rule a breach of the electronic protected health .. read more
