Minors’ Rights of Access to PHI: HIPAA & HITECH Act Blog by Jonathan P. Tomes
One of the more common questions that I get from Premium Members and others who have a free HIPAA question is regarding minors’ rights of .. read more
What Legal Support Services Need to Know About HIPAA: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Legal support services have become an important part of the legal system. Such services include the following: service of process; obtaining, translating, copying, and assembling .. read more
New $4.8 Million OCR Settlement for HIPAA Violations: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Attorney and EMR Legal Consultant Alice M. McCart
According to a press release issued May 7, 2014, by the Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”), “Two health .. read more
Possible Defenses to an OCR Investigation into an Alleged HIPAA Violation Now on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In my How to Handle HIPAA and HITECH Act Breaches, Complaints, and Investigations: Everything You Need to Know, Overland Park, KS: Veterans Press (2011), with .. read more
HIPAA Compliant Shredding? HIPAA & HITECH Act Blog by Jonathan P. Tomes
A long-time client for whom I have performed HIPAA consulting services recently asked me whether HIPAA had any rules for HIPAA compliant shredding. Short answer: .. read more
HIPAA and Crime on the Premises: HIPAA & HITECH Act Blog by Jonathan P. Tomes
I recently was told about how a covered entity reacted to a crime committed at its clinic. Apparently, a nurse had left her purse at .. read more
HIPAA Compliance Fire Protection for Paper Records: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator John J. Cadiero
One of the nice things about giving HIPAA seminars around the country is the great people that I meet—and not only at the seminars but .. read more
HIPAA Compliance Now Enforced by Massachusetts AGO: HIPAA & HITECH Blog by Jonathan P. Tomes
In March 2010, Massachusetts’ new data security regulations took effect. In January 2013, the Massachusetts Attorney General settled lawsuits filed against five entities for having .. read more
Can You Encrypt an iPad? HIPAA & HITECH Act Blog by Jonathan P. Tomes
A client recently asked me whether her organization could encrypt iPads that contained PHI. The answer is yes. Encryption, of course, is an addressable implementation .. read more
DHHS Issues New Guidance on De-identification
On November 26, 2012, the Department of Health and Human Services (“DHHS”) issued new guidance on the de-identification of protected health information (“PHI”). Its intent .. read more
