Phase II Audits: HIPAA Privacy, Security, and Breach Notification Heads Up: HIPAA & HITECH Act Blog by Jonathan P. Tomes
Section 13411 of the HITECH Act requires the Department of Health and Human Services (“DHHS”) to audit covered entities and business associates to ensure that .. read more
Review: AHIMA Posts Excellent Article on Appropriate Use of Copy and Paste Functionality in EHRs: HIPAA & HITECH Act Blog by Jonathan P. Tomes
You may wonder what copying and pasting has to do with HIPAA. Actually, the copy and paste functionality is an issue that certainly does have .. read more
Next Stage of DHHS Audits Coming: HIPAA & HITECH Act Blog by Jonathan P. Tomes
The U.S. Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”) has not yet published an audit protocol for this year’s Phase .. read more
New $4.8 Million OCR Settlement for HIPAA Violations: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Attorney and EMR Legal Consultant Alice M. McCart
According to a press release issued May 7, 2014, by the Department of Health and Human Services (“DHHS”) Office for Civil Rights (“OCR”), “Two health .. read more
New HIPAA Workforce Security Policy Now Posted on Premium Member Section: HIPAA & HITECH Act Blog by Jonathan P. Tomes
I am so grateful to my HIPAA seminar attendees, consulting clients, and Hands-on HIPAA Workshop participants for always helping me figure out what to write .. read more
Does a State Exchange Have to Comply with HIPAA? HIPAA & HITECH Act Blog by Jonathan P. Tomes and Guest Commentator Richard D. Dvorak
Last week, NBC affiliate station WGRZ contacted EMR Legal regarding our opinion whether the New York health care exchange had committed a Health Information Portability .. read more
First HIPAA Enforcement Action against a County Government: HIPAA & HITECH Act Blog by Jonathan P. Tomes with Guest Commentator Richard D. Dvorak
Last week, the Department of Health and Human Services (“DHHS”) announced in a press release its first HIPAA enforcement action against a county government and .. read more
Is the “Pending Doom” of Windows XP a HIPAA Violation? HIPAA & HITECH Act Blog by Jonathan P. Tomes
Many, primarily IT vendors, have stated that the pending doom of Windows XP, in which Microsoft will no longer support it after April 8, 2014, .. read more
HIPAA Compliant Shredding? HIPAA & HITECH Act Blog by Jonathan P. Tomes
A long-time client for whom I have performed HIPAA consulting services recently asked me whether HIPAA had any rules for HIPAA compliant shredding. Short answer: .. read more
OIG Slams DHHS Again for Not Enforcing HIPAA Adequately! HIPAA & HITECH Act Blog by Jonathan P. Tomes
On November 21, 2013, the Department of Health and Human Services (“DHHS”) Office of the Inspector General (“OIG”) issued another scathing report about the DHHS .. read more
