More about Shadow Students and HIPAA: HIPAA & HITECH Act Blog by Jonathan P. Tomes
We received a follow-on question from one of our blog readers after my previous post about shadow students. Thanks to Erin Barlow, Practice Manager, Xcel .. read more
The Bigger You Are, the Harder You’re Hacked: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Anthem, previously known as WellPoint, Inc., the nation’s second-largest health insurance company, recently suffered a sophisticated external cyberattack. Reportedly, 80 million of Anthem’s insureds had .. read more
Two New HIPAA Policies Available Now on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Two new sample HIPAA policies are now available on the Premium Member section of the Veterans Press website. We appreciate our clients and customers for .. read more
Appendix A to the Business Associate Agreement: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Often, my office gets calls and emails asking what Appendix A is to such an agreement and what should it say. We get these questions .. read more
Phase II Audits: HIPAA Privacy, Security, and Breach Notification Heads Up: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Section 13411 of the HITECH Act requires the Department of Health and Human Services (“DHHS”) to audit covered entities and business associates to ensure that .. read more
Hands-on HIPAA Compliance Workshop: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Is your organization’s HIPAA compliance lost at sea? As you may know, EMR Legal, Inc., is offering our 2-day Hands-on HIPAA Workshop October 16-17 aboard .. read more
Review: AHIMA Posts Excellent Article on Appropriate Use of Copy and Paste Functionality in EHRs: HIPAA & HITECH Act Blog by Jonathan P. Tomes
You may wonder what copying and pasting has to do with HIPAA. Actually, the copy and paste functionality is an issue that certainly does have .. read more
Next Stage of DHHS Audits Coming: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The U.S. Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”) has not yet published an audit protocol for this year’s Phase .. read more
You Don’t Just “Address” an Addressable Implementation Specification: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Recently, a HIPAA consultant answered a question about whether one had to implement an addressable implementation specification. His answer was basically “no.” He must have .. read more
Potential Business Associate Screening Questionnaire Now Available on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
You do not necessarily have to ask a potential business associate to complete all or portions of the questionnaire that I have developed and made .. read more
