Healthcare IT Today

OCTOBER 20, 2023

The Health Insurance Portability and Accountability Act of 1996 ( HIPAA ) is a federal law that safeguards sensitive patient health information (PHI) from being disclosed. But, more importantly, know how to implement them in a HIPAA-compliant way to keep patients and their data safe.

HIPAA 93

HIPAA Informed Consent Nurses Compliance 93

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules.

HIPAA 109

HIPAA Compliance Hospitals Medicare 109

Compliancy Group

MAY 5, 2023

As healthcare professionals continue to work from home, many are facing the challenge of ensuring that they remain HIPAA compliant in a remote environment. HIPAA (Health Insurance Portability and Accountability Act) is a federal law that requires healthcare providers to secure protected health information (PHI) and maintain its privacy.

HIPAA 52

HIPAA Compliance Health Insurance Doctors 52

HIPAA Journal

OCTOBER 7, 2022

On August 5, 2022, Anthem discovered that an unauthorized individual had gained access to a database and downloaded files containing plan members’ protected health information, including names, addresses, dates of birth, phone numbers, email addresses, Medicare ID numbers, and Medicaid ID numbers.

HIPAA 99

HIPAA Health Insurance Medicaid Medicaid 99

MedTrainer

FEBRUARY 19, 2024

The Health Insurance Portability and Accountability Act (HIPAA) has been a cornerstone healthcare regulation since 1996. Twenty-eight years later, the importance of HIPAA compliance in healthcare has not waned. What is HIPAA?

HIPAA 52

HIPAA Compliance Health Insurance Governance 52

HIPAA Journal

DECEMBER 1, 2022

An unauthorized individual was found to have gained access to its network and downloaded files containing the protected health information of 45,785 patients. California Health Insurance Agency Suffers Data Breach Affecting 14,600 Patients.

Health Insurance 102

Health Insurance Ransomware HIPAA Governance 102

C&M Health Law

DECEMBER 8, 2022

The Office for Civil Rights (OCR) at the Department of Health and Human Services (HHS) recently issued a bulletin to highlight the obligations of Health Insurance Portability and Accountability Act of 1996 (HIPAA) on regulated entities under the HIPAA Privacy , Security , and Breach Notification Rules when using online tracking technologies.

HIPAA 59

HIPAA Compliance Health Insurance 59

HIPAA Journal

JUNE 9, 2022

The forensic investigation found no evidence to suggest any of that information was viewed or downloaded, and no reports have been received of any instances of actual or attempted misuse of the data. The post Email Account Breaches Reported by Allaire Healthcare Group and Platinum Hospitalists appeared first on HIPAA Journal.

Licensing 118

Licensing HIPAA Health Insurance Hospitals 118

HIPAA Journal

JUNE 29, 2022

On June 25, 2022, a spokesperson for a threat group called DAIXIN Team contacted HIPAA Journal to share information about a ransomware attack and data theft incident at Fitzgibbon Hospital in Marshall, Missouri. DAIXIN Team was previously not known to HIPAA Journal and appears to be a new ransomware group.

Ransomware 116

Ransomware Hospitals HIPAA Health Insurance 116

MedTrainer

MAY 20, 2024

Download the Ultimate List of Training Requirements for FQHCs (CHCs) to see a full list of federal training requirements broken down by role, with the applicable standard and frequency. Below are courses common to many roles in FQHCs that meet federal requirements.

Compliance 52

Compliance HIPAA Health Insurance Medicaid 52

MedTrainer

MAY 21, 2024

Behavioral Health Compliance Training Requirements There isn’t a universal list of training requirements for all behavioral health professionals. Training requirements vary by role and specific healthcare setting.

Compliance 52

Compliance Medicaid Medicaid HIPAA 52

HIPAA Journal

FEBRUARY 8, 2023

During that time the third party downloaded a file that contained patient data. Financial information, contact information, dates of birth, Social Security numbers, health insurance information, or medical information were not accessed or stolen in the attack.

Medical Billing 89

Medical Billing HIPAA Health Insurance 89

MedTrainer

MAY 16, 2024

Download the Ultimate List of Training Requirements for Ambulatory Surgery Centers to see a full list of federal and accreditation training requirements for ASC staff broken down by role, with the applicable standard, CMS violation category, and frequency. Staff should review the requirements for their specific state to remain in compliance.

Compliance 52

Compliance HIPAA Health Insurance Medicaid 52

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 99

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 99

HIPAA Journal

NOVEMBER 17, 2022

New York-Presbyterian Hospital has recently announced that unauthorized individuals gained access to one of its servers and attempted to download sensitive data. The security system detected the intrusion on September 8, 2022, and successfully blocked the attempted download. The electronic record system was unaffected.

Ransomware 83

Ransomware Health Insurance Hospitals Fraud 83

HIPAA Journal

SEPTEMBER 8, 2023

For patients, the affected information included name, address, email, phone number(s), birth date, Social Security number, driver’s license number, health insurance policy information, treatment information including radiographic images, medical record number, account number, and health conditions.

Licensing 99

Licensing Ransomware Health Insurance HIPAA 99

Total HIPAA

OCTOBER 28, 2019

A newsletter on the importance of importance of HIPAA logging requirements states this: 1. HIPAA log retention is also crucial; if the hospital had not archived the logs, investigators could not have found the incriminating records. What HIPAA Security Rule Mandates. What HIPAA Security Rule Mandates.

HIPAA 52

HIPAA Compliance Fraud Hospitals 52

HIPAA Journal

JULY 31, 2023

The vulnerability was immediately addressed; however, the forensic investigation revealed hackers had exploited the vulnerability on May 28, 2023, and downloaded files from the system. The post 700,000 Highly Sensitive School Records Exposed Online appeared first on HIPAA Journal.

Health Insurance 86

Health Insurance Hospitals HIPAA Licensing 86

HIPAA Journal

NOVEMBER 8, 2023

The compromised information included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or state IDs, medical treatment information, and health insurance information. The post November 8, 2023, Healthcare Data Breach Round-Up appeared first on HIPAA Journal.

Ransomware 98

Ransomware Licensing Health Insurance HIPAA 98

Total HIPAA

APRIL 19, 2023

Introduction: As a health insurance agent, understanding the complexities of the Health Insurance Portability and Accountability Act, or HIPAA, is essential. One of the critical aspects of HIPAA is the Business Associate Agreement (BAA). What is included in a typical Business Associate Agreement?

HIPAA 52

HIPAA Compliance Health Insurance 52

Health Populi

JULY 24, 2023

In the program’s FAQs, one question clearly addresses this, transparently and in layperson’s terms: Q: “Do I need health insurance to use GNC Health?” ” A: “Nope — insurance isn’t needed or accepted.” Cost, cost, cost, cost, and cost — above quality of care.

Health Insurance 118

Health Insurance Medical Billing Licensing HIPAA 118

HIPAA Journal

FEBRUARY 16, 2023

While the investigation into the breach is ongoing, Edgepark Medical Supplies was informed that the files potentially accessed included names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information. The breach was confined to Rise Interactive’s systems.

HIPAA 85

HIPAA Health Insurance 85

HIPAA Journal

APRIL 18, 2022

numbers, financial account numbers, passport numbers, medical information, and/or health insurance information. While unauthorized email account access was confirmed, it was not possible to tell if any emails or attachments in the accounts had been viewed or downloaded.

Licensing 111

Licensing HIPAA Health Insurance Hospitals 111

HIPAA Journal

MAY 17, 2022

The review of the files revealed they mostly contained protected health information such as names, addresses, medical information, and/or health insurance information. Notification letters have now been sent to the 28,024 patients whose protected health information has potentially been compromised.

Health Insurance 94

Health Insurance Licensing Ransomware HIPAA 94

MedTrainer

MARCH 8, 2024

Specific topic areas include: HIPAA: The Health Insurance Portability and Accountability Act is a federal law that governs the privacy and security of patient health information. Compliance training should cover the key provisions of HIPAA, including the Privacy Rule, Security Rule, and Breach Notification Rule.

Compliance 52

Compliance Fraud Governance HIPAA 52

HIPAA Journal

APRIL 1, 2022

Last week, SRHD confirmed that the email account contained the protected health information of 1,260 individuals. That information may have been ‘previewed’ by an unauthorized individual, although no evidence was found to suggest information had been accessed or downloaded.

Fraud 128

Fraud HIPAA Licensing Health Insurance 128

HIPAA Journal

JUNE 1, 2023

The files potentially viewed or stolen included names, addresses, dates of birth, health insurance information, medical record numbers, and some health information. A review was conducted to determine if any files had potentially been downloaded to the laptop that could have been accessed.

Hospitals 81

Hospitals Electronic Medical Records HIPAA Health Insurance 81

HIPAA Journal

AUGUST 10, 2023

Omaha Health Insurance Company The Omaha Health Insurance Company (OHIC), part of Mutual of Omaha, has reported a security breach at a third-party vendor that exposed the records of individuals who were enrolled in the Medicare Part D Prescription Drug Plan, which was issued by Mutual of Omaha Rx.

Medicaid 52

Medicaid Medicaid Health Insurance HIPAA 52

HIPAA Journal

JANUARY 27, 2023

The data potentially accessed included names, birth dates, Social Security numbers, financial information, driver’s license numbers, biometric information, diagnosis and treatment information, and health insurance information. This coincides with the 60-day reporting deadline of the HIPAA Breach Notification Rule.

Ransomware 89

Ransomware HIPAA Fraud Hospitals 89

Verisys

NOVEMBER 8, 2023

CMS.gov The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the creation of a standard, unique health identifier for healthcare providers, which the NPI satisfies. Why Are NPI Numbers Necessary? Complete instructions are found on the CMS website.

Fraud 97

Fraud HIPAA Medicare Medicare 97

HIPAA Journal

FEBRUARY 13, 2023

The forensic investigation confirmed that AWS S3 storage buckets were accessed by the attackers, the contents of those buckets were downloaded, then the data in the buckets were deleted. The lawsuit alleged a failure to comply with its obligations under HIPAA and a failure to adhere to industry standard cybersecurity best practices.

HIPAA 73

HIPAA Fraud Health Insurance 73

Healthcare IT Today

DECEMBER 15, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards.

Electronic Medical Records 113

Electronic Medical Records Doctors HIPAA Hospitals 113

HIPAA Journal

MARCH 10, 2022

The files exfiltrated from its systems included the protected health information of patients. Assisted by a third-party cybersecurity firm, APTG determined on January 7, 2022, that files containing the protected health information of 14,970 patients may have been exfiltrated from its network between December 23, 2021, and December 28, 2021.

Ransomware 123

Ransomware Licensing Health Insurance Hospitals 123

HIT Consultant

DECEMBER 18, 2023

Simply open a mobile app and download the report to your smartphone. In Europe, this is GDPR (General Data Protection Regulation), in America, it’s HIPAA (Health Insurance Portability and Accountability Act). AWS solutions require software compatible with HIPAA standards. Pros: Scalable for different needs.

Electronic Medical Records 104

Electronic Medical Records Doctors HIPAA Pharmaceutical Industry 104

MedTrainer

MARCH 8, 2024

Download the Ultimate List of Training Requirements for Long-Term Care to see a full list of federal training requirements for nursing homes and skilled nursing staff broken down by role, with the applicable standard, CMS violation category, and frequency. Training requirements vary by employee role and specific healthcare setting.

Compliance 52

Compliance Nursing Homes HIPAA Nurses 52

AIHC

APRIL 10, 2024

HITECH is a critical aspect of the Health Insurance Portability & Accountability Act (HIPAA). Since 2009, HITECH has given “teeth” to HIPAA law. What’s the difference between HIPAA and HITECH? HIPAA guarantees patients access to their paper medical records. Understanding HIPAA is crucial.

Compliance 52

Compliance US Department of Health and Human Services HIPAA Electronic Medical Records 52

MedTrainer

JANUARY 31, 2024

Certified HIPAA Professional (CHP): Several entities, such as ECFC, offer versions of a CHP certification. This designation is ideal for healthcare professionals tasked with ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA). appeared first on MedTrainer.

Compliance 52

Compliance Compliance Officers Fraud Regulatory Compliance 52