Transporting PHI: HIPAA On the Road
PHI in transit consists of either paper documents or records, or portable media and devices. The physical safeguard provisions of the HIPAA Security Rule require covered entities to protect [...]
Extensive Noncompliance with HIPAA Right to Access
medRxiv, a health manuscript archiving company, conducted a study in which they sent 51 healthcare providers medical record requests. The purpose of the study was to determine if healthcare [...]
152,000 Patients Affected by St. Louis Medical Center Ransomware Attack
A ransomware attack beginning in September has left Betty Jean Kerr People’s Health Centers scrambling. The health center declined to pay the ransom, as such they [...]
HIPAA Antivirus Software
The HIPAA Security Rule contains administrative safeguards in the form of security standards. One of these standards requires covered entities and business associates to implement a [...]
HIPAA Compliance for Non-Covered Entities
The HIPAA law subjects covered entities - defined as health plans, health providers, and healthcare clearinghouses - to its regulatory scheme. By definitions, non-covered entities are not subject [...]
19,500 UAB Medicine Patients Affected by Healthcare Phishing Attack
The University of Alabama (UAB) Medicine is the latest victim of a healthcare phishing attack, affecting 19,500 patients. A phishing attack occurs when a hacker disguises [...]
Is OneDrive HIPAA Compliant?
The convenience of using cloud storage has caused many businesses to use the technology. In the healthcare industry, the ability to quickly access patient’s protected health information (PHI) from [...]
Does HIPAA Impose Medical Record Retention Requirements?
The Health Insurance Portability and Accountability Act (HIPAA) protects the privacy and security of individually identifiable health information. The Act does so through regulations issued by the [...]
6 Tips to Protect Your Practice from a Data Breach
The HIPAA Breach Notification Rule requires HIPAA covered entities and their business associates to provide notification following a breach of unsecured protected health information (PHI). 6 tips to protect [...]
5,800 Affected by Business Associate Email Breach
An email breach at Magellan National Imaging Associates claims another covered entity victim, Geisinger Health Plan. Magellan, hired by the health plan to manage their radiology [...]
