Despite the fact that Business Associates have been directly subject to and liable under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (HIPAA) since February 18, 2010 the...more
On March 21, 2016, the Department of Health and Human Services, Office for Civil Rights (OCR) announced the launch of the long-awaited Phase 2 HIPAA Audit Program (Phase 2), and OCR activities related to Phase 2 are already...more
The U.S. Department of Health and Human Services, Office for Civil Rights (HHS-OCR) has recently released information about another HIPAA settlement, emphasizing yet again the government's focus on the Health Insurance...more
A Massachusetts dermatology practice, Adult & Pediatric Dermatology, P.C. ("APDerm") recently agreed to pay $150,000 to settle potential violations of HIPAA Privacy, Security, and Breach Notification Rules. The settlement was...more
Nearly one year after a Massachusetts provider paid $1.5 million to settle potential HIPAA violations for the theft of an unencrypted laptop containing protected health information (PHI), providers are reminded once again of...more
In This Issue:
- Right to Access Protected Health Information
- Restrictions on Health Plan Disclosures
- Guidance on How to Comply With the Expanded Patient Rights
..Evaluate Electronic Systems
..Revise...more
In This Issue:
- Modifications Related to the Use and Disclosure of PHI for Marketing Purposes
- Modifications Related to the Use and Disclosure of PHI for Research Purposes
..Compound Authorizations...more
In This Issue:
- Definition of “Unsecured Protected Health Information”
- Notice Requirements
- Action Items to Comply with the Breach Notification
- Excerpt from Definition of “Unsecured Protected Health...more
In This Issue:
- Expansion of, Clarifications to, and Explicit Inclusions in the Definition of BA
- BAs’ Direct Liability Under the Final Rule
- BAAs: Required Provisions Under the Final Rule and the Compliance...more
In This Issue:
- Brief Overview of Key Modifications in the Final Rule
- Suggested Action Items for Compliance with the Final Rule
..Covered Entities
..Business Associates
- Consequences of Noncompliance...more
2/1/2013
/ Business Associates ,
Compliance ,
Covered Entities ,
Data Breach ,
Department of Health and Human Services (HHS) ,
Enforcement ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HITECH Act ,
Notice Requirements ,
PHI ,
Third-Party