A Court Order Isn’t Necessarily a Court Order. What is necessary and sufficient? HIPAA &HITECH Act Blog by Jonathan P. Tomes
HIPAA is hard to understand, even for lawyers. One of the hardest HIPAA concepts to understand and apply is the difference between necessary and sufficient .. read more
Sample Release of PHI to Clergy Policy Posted in Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
As I discussed in my December 21, 2017, blog post, which included a new Sample Media Policy, and my November 28, 2017, post regarding the .. read more
Second Draft of NIST Cybersecurity Framework Published: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The National Institute for Standards and Technology (“NIST”) has published its second draft of its revised Cybersecurity Framework (“the Framework”). Version 1.0 of the NIST .. read more
New Sample Media Policy for Our Blog Readers: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Merry Christmas! A Christmas Present from Jon and Alice Normally, we at Veteran’s Press and EMR Legal, our HIPAA publishing and consulting companies, reserve new .. read more
OCR Clarification on Aspects of Privacy Rule after Man-made Disasters: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The recent shooting attack in Las Vegas and other man-made disasters have prompted the Department of Health and Human Services (“DHHS”) Office for Civil Rights .. read more
NCCoE and NIST Guidelines for Ransomware Recovery: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Little doubt exists that ransomware is a major threat to the availability of health information. Ransomware is a type of malicious software from cryptovirology, a .. read more
Joseph R. Borich, Esq., Is Now Vice President of Operations for EMR Legal and Veterans Press: HIPAA & HITECH Act Blog by Jonathan P. Tomes
EMR Legal and Veterans Press are pleased to announce that Joe Borich has joined both EMR Legal and Veterans Press as Vice President of Operations. .. read more
Medical Device Security and HIPAA: A New Security Frontier. HIPAA & HITECH Act Blog by Jonathan P. Tomes
When one thinks about hackers going after electronic health information for identity theft or other nefarious purposes, one thinks about them attacking the electronic health .. read more
Hospital Patients Targeted in Scam: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Identity thieves have been conducting a telephone phishing (originally defined as the fraudulent practice of sending emails purporting to be from reputable companies in order .. read more
DHHS Issues Changes to 42 C.F.R. Part 2’s Drug and Alcohol Abuse Regulations re Client Privacy: HIPAA & HITECH Act Blog post by Jonathan P. Tomes
In February 2016, the Department of Health and Human Services (“DHHS”) published a proposed change to the Confidentiality of Alcohol and Drug Abuse Patient Records .. read more
