Latest HIPAA Violation Settlement–$850,000 for a Stolen Laptop: HIPAA & HITECH Act Blog by Jonathan P. Tomes
I don’t understand why, with all the high six-figure and seven-figure resolution agreements (basically, settlements), covered entities do not provide adequate security for laptops and .. read more
Risk Analysis: The First One Is the Worst One: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Alice M. McCart, J.D.
We have many new HIPAA consulting clients at EMR Legal and many new HIPAA compliance tools customers at Veterans Press who know that they must .. read more
Latest HIPAA Settlement—a Lesson Still Not Learned: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Although most civil money penalties (“CMPs”) to date have involved risk analysis—that is, failure to do one, failure to do a complete one, or failure .. read more
EMR Legal Remains Undefeated against OCR: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Sometimes, we just need to toot our own horn. We are pleased to note that EMR Legal remains undefeated going up against the Department of .. read more
Risk Analysis and Risk Assessment: Are They Different? HIPAA & HITECH Act Blog by Jonathan P. Tomes
Quite often, my HIPAA clients and those who read my blog ask what the difference is between a risk analysis and a risk assessment. In .. read more
Phase II Audits: HIPAA Privacy, Security, and Breach Notification Heads Up: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Section 13411 of the HITECH Act requires the Department of Health and Human Services (“DHHS”) to audit covered entities and business associates to ensure that .. read more
Hackers Gain Access to 4.5 Million Patients’ Data at Community Health Systems: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Attorney/Consultant Alice M. McCart
According to several national news sources, such as Fox4 News Kansas City, CNNMoney, Reuters, the Wall Street Journal, USA Today, and the Chicago Tribune, Community .. read more
You Don’t Just “Address” an Addressable Implementation Specification: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Recently, a HIPAA consultant answered a question about whether one had to implement an addressable implementation specification. His answer was basically “no.” He must have .. read more
New $4.8 Million OCR Settlement for HIPAA Violations: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Attorney and EMR Legal Consultant Alice M. McCart
According to a press release issued May 7, 2014, by the Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”), “Two health .. read more
Reminder: Our 2-day Complete Hands-on HIPAA Workshop Is Less Than 3 Weeks Away: HIPAA & HITECH Act Blog by Jonathan P. Tomes
If you have already signed up for our two-day Hands-on HIPAA Workshop in Dallas next month, please complete your Gap Analysis Survey Questionnaire and return .. read more