The HIPAA Omnibus rule has held the attention of healthcare entities for some time now, and with this final rule coming to effect, covered entities have to give significant consideration to the potential civil penalties related to the HITECH Act, which are now associated with the rule. Penalties are no longer limited to the maximum…
While you’re busy preparing for the upcoming HIPAA audit, here’s an important question that you need to address: What determines the size of the penalty for violating HIPAA rules? According to Leon Rodriguez, director of the Department of Health and Human Services’ Office of Civil Rights, two key factors play a role in determining the…
The results of the 115 HIPAA compliance audits conducted as part of the pilot project last year are being evaluated, said Susan Mc Andrew of the Department of Health and Human Services’ Office for Civil Rights, and the HIPAA compliance audit program will not resume until after the current fiscal year ends. The evaluation is…
For most information security officers, winning funds for IT security investments remains one of the top challenges. While on the one hand the healthcare industry is seeing rigorous enforcement of information security regulations, on the other, most healthcare entities are yet to understand the importance of investing in information security measures. Decision-makers often have to…
The need for periodic risk assessments in healthcare will get continued emphasis as federal advisers are now considering options for reinforcing its importance in Stage 3 of the EHR Incentive Program under the HITECH Act. While the HIT Policy Committee recently asked its Privacy and Security Tiger Team to consider security rule provisions to be…
With the release of Omnibus HIPAA privacy and security rule on January 17th this year, the health information security landscape is set to experience some major changes. Healthcare entities are facing the immediate need to conduct risk assessments and testing to meet HIPAA compliance requirements. While more audits and increased penalties for non-compliance are likely,…
The HIPAA Omnibus rule has now brought business associates and subcontractors under its gamut, making it mandatory for them to comply with the requirements of the final rule, or face stiff penalties. So business associates and subcontractors are now bound to conduct risk assessments and make appropriate use of encryption along with other precautionary measures…
The HIPAA Omnibus rule has made significant impact on the healthcare industry. It has created a complex chain of compliance liability for covered entities, their business associates and subcontractors, who are all now equally accountable for the protection of private health information, and responsible for the compliance conduct of their ‘downstream’ partners under certain circumstances,…
With great power also comes great responsibility. And this is especially true for healthcare entities that employ the power of information to provide better services. Patient Health Information, like any other information is a valuable asset for healthcare organizations. However, organizations that handle and process health information are also expected to protect it. This is…
With the HIPAA Privacy and Security final rule released on January 17th also comes some significant changes that are likely to impact the healthcare industry. While this final rule, to a large extent tracks what was in the proposed rule, certain changes are expected to catch the attention of healthcare providers in the country, according…
