Business Associates? How Low Can You Go? HIPAA & HITECH Act Blog by Jonathan P. Tomes
The Omnibus Rule effectively made “downstream” business associates—that is, subcontractors—into business associates and thus effectively into covered entities. They are now effectively if not by .. read more
What Legal Support Services Need to Know About HIPAA: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Legal support services have become an important part of the legal system. Such services include the following: service of process; obtaining, translating, copying, and assembling .. read more
You Don’t Just “Address” an Addressable Implementation Specification: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Recently, a HIPAA consultant answered a question about whether one had to implement an addressable implementation specification. His answer was basically “no.” He must have .. read more
Potential Business Associate Screening Questionnaire Now Available on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
You do not necessarily have to ask a potential business associate to complete all or portions of the questionnaire that I have developed and made .. read more
Can You Skype and Be HIPAA Compliant? HIPAA & HITECH Act Blog by Jonathan P. Tomes
Well, you certainly can if you don’t disclose any PHI when communicating by Skype. But if you want to use Skype as a form of .. read more
3 New HIPAA Compliance Templates Now on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Check out the new HIPAA compliance templates now available on the Premium Member section of the Veterans Press website. All three of these templates came .. read more
Possible Defenses to an OCR Investigation into an Alleged HIPAA Violation Now on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
In my How to Handle HIPAA and HITECH Act Breaches, Complaints, and Investigations: Everything You Need to Know, Overland Park, KS: Veterans Press (2011), with .. read more
Our 2-day Complete Hands-on HIPAA Workshop Less Than 2 Months Away: HIPAA & HITECH Act Blog by Jonathan P. Tomes
If you dread trying to get your organization HIPAA compliant and want someone to just help you get it done almost all at once and .. read more
Report HIPAA Breaches Involving Fewer Than 500 Individuals by February 28! HIPAA & HITECH Act Blog by Jonathan P. Tomes
45 C.F.R. § 164.408 requires covered entities that discover a breach of unsecured protected health information (“PHI”) to notify the Secretary of Health and Human Services .. read more
New Wall of Shame Format: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Before discussing the new format, note that almost 800 covered entities are now memorialized, so to speak, on the Big Breacher website (my name for .. read more
