Is Bookly HIPAA-Compliant?
HIPAA Vault
FEBRUARY 22, 2023
Are online scheduling plugins for healthcare HIPAA compliant?
How to Handle Subcontractors Under HIPAA
Total HIPAA
AUGUST 16, 2023
By signing a BAA, the company is stating that they have their own HIPAA compliance approach which meets the law’s requirements. It is still the responsibility of the covered entity to make sure they only sign Business Associate Agreements with business associates who are truly HIPAA compliant.
HIPAA 
98
98 Join 50,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Six Compelling Reasons to Begin Your HIPAA Compliance Journey Before the Year Ends
Total HIPAA
NOVEMBER 15, 2023
As 2023 unfolds, the urgency for entities in the healthcare sector to initiate or reinforce their HIPAA compliance cannot be overstated. Prove Your Due Diligence The decision to postpone setting up comprehensive policies, procedures, and HIPAA training could be detrimental. This first impression can be pivotal in an audit scenario.
HIPAA 98
98 
New HIPAA Regulations in 2022-2023
HIPAA Journal
DECEMBER 14, 2022
It has been several years since new HIPAA regulations have been signed into law, but HIPAA changes in 2022 are expected. The last update to the HIPAA Rules was the HIPAA Omnibus Rule in 2013, which introduced new requirements mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act.
HIPAA 128
128 
Understanding the Common Agency Provision in HIPAA – aka “Basis for a Civil Money Penalty,” or 45 CFR § 160.402
Total HIPAA
SEPTEMBER 12, 2023
In the extensive world of rules and regulations related to HIPAA, it’s crucial to have a clear grasp of specific rules for both legal and ethical reasons. ” This rule serves as a central reference point for organizations that are subject to the Health Insurance Portability and Accountability Act (HIPAA).
HIPAA 98
98 
What is Access Control in terms of HIPAA?
Total HIPAA
DECEMBER 4, 2023
HIPAA Prime Our service, HIPAA Prime, offers a structured path towards compliance, including crucial steps like a Risk Assessment and subsequent reviews. This process not only enhances your cybersecurity but also stands as evidence of your commitment to HIPAA compliance. The post What is Access Control in terms of HIPAA?
HIPAA 52
52 
Artificial Intelligence in HIPAA Compliance
Total HIPAA
AUGUST 30, 2023
Users can tell a language model exactly what they are looking for as far as tone, and they can ask the AI to rewrite sentences and create summaries which is useful for creating HIPAA Policies and Procedures for Privacy and Security of PHI. Book a Clarity Call today to learn more about HIPAA Prime!
HIPAA 52
52 
Cerebral Admits HIPAA Breach, Reports Leak of Data On 3.1 Million Users
Healthcare IT Today
MARCH 24, 2023
Cerebral’s investigation concluded that the data might be considered protected health information and that it had failed to make sure that these third parties met HIPAA requirements for protecting PHI. Its leaders found that the tracking technology used to mine user data had disclosed information to third parties and subcontractors.
HIPAA 101
101 
Navigating New Horizons: 2023 HIPAA Rule Changes and PHI
Total HIPAA
MAY 31, 2023
HIPAA (Health Insurance Portability and Accountability Act) has evolved over the years to adapt to advancements in healthcare and technology. The 2013 HIPAA Omnibus Final Rule expanded its scope, and now the HIPAA Privacy Rule is set to change again in 2023. HIPAA’s Evolution: HIPAA has been crucial in U.S.
HIPAA 52
52 
Who is Responsible for Employee Health Information?
Total HIPAA
OCTOBER 18, 2023
HIPAA applies to employers when the organization has a self-funded or level-funded health plan. Now, when does HIPAA become relevant for employers? HIPAA comes into play when an employer chooses to self-insure or go with a level-funded plan, which means they assume the financial risk of providing health benefits to their employees.
ADA 94
94 
How to Fail a HIPAA Audit as an Employer
Total HIPAA
JUNE 28, 2023
You may have been wondering if this means you’ll have to do something about “HIPAA”. This means you need to be HIPAA compliant as an employer. HIPAA compliance means having a plan. Here are three common pitfalls to look out for in your HIPAA Compliance Plan: 1.
HIPAA 52
52 
Limiting PHI Exposure with HIPAA Access Management and Controls
Compliancy Group
OCTOBER 19, 2022
Implementing HIPAA access controls and having an access management system reduces the likelihood of unauthorized access to protected health information (PHI). What is HIPAA Access Management? . HIPAA access management is an integral part of security and compliance. Security in HIPAA Compliance. Find Out More!
HIPAA 52
52 
HIPAA Compliance in Marketing and Communications for Insurance Agents
Total HIPAA
MARCH 23, 2022
If so, you must comply with the Health Insurance Portability and Accountability Act (HIPAA) when it comes to marketing and communications. In this blog post, we’ll cover some essential considerations that insurance agents should keep in mind to ensure HIPAA compliance in their marketing and communications. HHS.gov, [link].
HIPAA 52
52 
Recommended HIPAA Compliant Email Encryption Services
Total HIPAA
MARCH 29, 2023
In this blog post, we review nine email encryption vendors ( Barracuda, Egress, Hushmail, Indentillect, LuxSci, MailHippo, NeoCertified, Protected Trust, ProtonMail, Rmail, & Virtru ) who provide HIPAA compliant email encryption services that will keep your information safe when in transit. Setup takes less than 30 minutes.
HIPAA 52
52 
Meta Facing Further Class Action Lawsuit Over Use of Meta Pixel Code on Hospital Websites
HIPAA Journal
AUGUST 1, 2022
If the code is present on a web page with a form, such as those used to book appointments, the selections from drop-down boxes are recorded and transmitted. Those selections could indicate a patient’s medical condition or why an appointment has been booked. The code records and transmits to Meta the web pages that a user visits.
Hospitals 132
132 
Zocdoc Expands Beyond Marketplace with Launch of Zocdoc Practice Solutions
HIT Consultant
SEPTEMBER 19, 2023
What You Should Know: Zocdoc, the leading healthcare marketplace that makes it easy for patients to find and book in-person or virtual care across over 250 specialties and more than 18,000 insurance plans, today announced the launch of Zocdoc Practice Solutions.
HIPAA 109
109 HIPAA 109
109 
7 Benefits of Patient Scheduling Software
HIPAA Journal
FEBRUARY 9, 2024
Patient scheduling software is software that can be used by patients to self-book healthcare appointments, by physicians to fill their schedules, and by medical practices to synchronize patient appointments with physician and treatment room availability in order to optimize the use of time and resources.
HIPAA 40
40 
Ransomware Attack Announced by Codman Square Health Center
HIPAA Journal
MARCH 10, 2023
The list included patient names, dates of birth, medical record numbers, appointment dates/times, and a brief description of why the appointment was booked. The risk of misuse of the data is believed to be low, but notification letters have been sent alerting patients about the HIPAA breach.
Ransomware 110
110 
Best HIPAA Compliant Email Encryption Services
Total HIPAA
APRIL 20, 2020
In this blog post, we review nine email encryption vendors ( Barracuda, Egress, Hushmail, Indentillect, MailHippo, LuxSci, Protected Trust, Rmail, & Virtru ) who provide HIPAA compliant email encryption services that will keep your information safe when in transit. Barracuda – HIPAA Compliant Email Encryption Service.
HIPAA 59
59 
CISA, FBI warn health systems and others of Clop MFT ransomware tactics
Healthcare It News
JUNE 13, 2023
Users can build HIPAA-compliant healthcare applications, for example, and MOVEit controls data transfers with encryption, tracking and access controls. Bad actors submitted them to medical facilities and booked telehealth appointments in the hope that a provider would open the document, infecting its network, before a scheduled appointment.
Ransomware 226
226 
Interpreting The Confidentiality of Substance Use Disorder (SUD) Patient Records Law (42 CFR Part 2)
Total HIPAA
AUGUST 2, 2023
To ensure the protection of sensitive information related to Substance Use Disorder (SUD) patients, the US Department of Health and Human Services and The Substance Abuse and Mental Health Services Administration (HHS and SAMHSA) collaborated to create the HIPAA Drug and Alcohol Records Law, also known as 42 CFR Part 2.
Increase Staff Productivity And Reduce No Shows With A Patient Engagement System
HIPAA Journal
JANUARY 11, 2024
A HIPAA compliant patient engagement system enables healthcare organizations of any size to streamline workflows, increase staff productivity, maximize revenue and reduce no shows by up to 90%. HIPAA compliant patient engagement can be easily added to any existing practise management system to enhance patient communication.
HIPAA 52
52 
Building a Culture of Compliance
Total HIPAA
OCTOBER 3, 2023
That could include things like requiring a password manager, multi-factor (MFA) authentication, and taking HIPAA training every year. Since publication of these incidents is required, it is less and less possible to claim ignorance to the importance of being HIPAA compliant.
Compliance 98
98 
How to establish a BAA with Google
Total HIPAA
APRIL 5, 2023
Google offers BAAs for its HIPAA-compliant products and services, including Google Workspace (formerly G Suite), Google Cloud Platform, and Google Meet. Source: Google Here’s how to review and accept the HIPAA Business Associate Amendment: Sign in to your Google Admin console using an account with super administrator privileges.
HIPAA 52
52 
How to Put a BAA in Place with Google
Total HIPAA
APRIL 5, 2023
Google offers BAAs for its HIPAA-compliant products and services, including Google Workspace (formerly G Suite), Google Cloud Platform, and Google Meet. Here’s how to review and accept the HIPAA Business Associate Amendment: Sign in to your Google Admin console using an account with super administrator privileges. We do that!
HIPAA 52
52 
Artificial Intelligence in Healthcare
Total HIPAA
AUGUST 30, 2023
Users can tell a language model exactly what they are looking for as far as tone, and they can ask the AI to rewrite sentences and create summaries which is useful for creating HIPAA Policies and Procedures for Privacy and Security of PHI. Book a Clarity Call today to learn more about HIPAA Prime!
HIPAA 95
95 
Pixel Use Results in Impermissible Disclosure of the PHI 3.1 Million Cerebral Platform Users
HIPAA Journal
MARCH 10, 2023
On January 3, 2023, Cerebral said it discovered pixels and other tracking technologies on its platform had collected and transferred sensitive HIPAA-protected information to third parties such as Meta (Facebook), Google, TikTok, and others. Million Cerebral Platform Users appeared first on HIPAA Journal.
HIPAA 80
80 
HHS Issues a Final Rule to Support Reproductive Healthcare Privacy
Compliancy Group
APRIL 26, 2024
Wade, the Department of Health and Human Services’ Office for Civil Rights issued a Notice of Proposed Rulemaking to modify the HIPAA Privacy Rule in April of last year. This April, HHS issued a Final Rule, the HIPAA Privacy Rule to Support Reproductive Healthcare Privacy. What Does the Final Rule Do?
HIPAA 59
59 
Beware the Use of Online Tracking Tools in Healthcare
Compliancy Group
JANUARY 9, 2024
The AG found that the hospital violated HIPAA by using advertising tools on its website that collected and shared PHI with third-party tech companies. The sharing took place as visitors used the website to search for doctors or book appointments. HIPAA must specifically permit any disclosure of PHI under the agreement.
HIPAA 52
52 
Study Reveals One Third of Top 100 U.S. Hospitals are Sending Patient Data to Facebook
HIPAA Journal
JUNE 17, 2022
The Markup said there did not appear to be any business associate agreements between the hospitals and Meta that would allow the data sharing under the HIPAA Rules, and express consent from patients authorizing the sharing of data with Meta did not appear to have been obtained, suggesting potential HIPAA violations.
Hospitals 135
135 
Preserving Patient Confidentiality: Prioritizing Security in Healthcare Facilities
Total HIPAA
JULY 12, 2023
Regular vulnerability scanning reduces the risk of data breaches and ensures compliance with regulations like HIPAA, which protects patient privacy. Iceberg Cyber partners with Total HIPAA, a comprehensive compliance solution. Book a clarity call with Total HIPAA today for a comprehensive compliance solutions tailored to your needs.
HIPAA 52
52 
UC San Diego Health Announces Impermissible Disclosure of Patient Data Due to Website Analytics Code
HIPAA Journal
MARCH 20, 2023
The analytics code captured limited data of visitors to the scheduling websites who booked in-person or telehealth appointments. The post UC San Diego Health Announces Impermissible Disclosure of Patient Data Due to Website Analytics Code appeared first on HIPAA Journal. PPO, HMO, Other).
HIPAA 98
98 HIPAA 98
98 
Why We Should Care About the Move from Saliva to Living Cells in Precision Medicine
Bill of Health
OCTOBER 17, 2023
While collecting and isolating DNA samples from saliva may offer a wealth of information regarding heredity, disease risk, and other outflows of the “instruction manual” for patients, analyzing cells captures the minutiae of patients that goes “beyond the book” and most closely informs pathology.
FDA 277
277 
University of Iowa Hospitals and Clinics Sued for Unlawful Disclosures of PHI to Facebook
HIPAA Journal
MAY 10, 2023
The lawsuit claims UIHC manages or controls two websites that are used for booking appointments, locating treatment facilities and physicians, and registering patients for events and classes. The post University of Iowa Hospitals and Clinics Sued for Unlawful Disclosures of PHI to Facebook appeared first on HIPAA Journal.
Hospitals 79
79 
Downtime Procedures Still in Effect at Ascension Hospitals; First Lawsuits Filed
HIPAA Journal
MAY 24, 2024
As far as the HIPAA Journal has been able to determine, the first lawsuit was filed on May 12, 2024, just 4 days after the ransomware attack occurred and a second lawsuit was filed the following day. The post Downtime Procedures Still in Effect at Ascension Hospitals; First Lawsuits Filed appeared first on HIPAA Journal.
Hospitals 74
74 
Case Study- Hook, Line, and Sinker: Falling for a Phishing Scam
Total HIPAA
MAY 17, 2023
A HIPAA Prime client emailed and called us on a Tuesday afternoon to let us know that earlier that day their email had been hacked and a phishing email was sent out to over 1,000 contacts that included clients. The Total HIPAA Compliance Team immediately called them back to assist. Thank you for your understanding and cooperation.
HIPAA 52
52 
Navigating Business Associate Agreements for Insurance Agents: A Comprehensive Guide
Total HIPAA
APRIL 19, 2023
Introduction: As a health insurance agent, understanding the complexities of the Health Insurance Portability and Accountability Act, or HIPAA, is essential. One of the critical aspects of HIPAA is the Business Associate Agreement (BAA). What is included in a typical Business Associate Agreement?
HIPAA 52
52 
Interpreting The Confidentiality of Substance Use Disorder (SUD) Patient Records Law (42 CFR Part 2)
Total HIPAA
AUGUST 2, 2023
To ensure the protection of sensitive information related to Substance Use Disorder (SUD) patients, the US Department of Health and Human Services and The Substance Abuse and Mental Health Services Administration (HHS and SAMHSA) collaborated to create the HIPAA Drug and Alcohol Records Law, also known as 42 CFR Part 2.
IKS Health Purchases AQuity Solutions to Create the Most Comprehensive Provider of Administrative, Clinical and Financial Services for Healthcare Organizations in the U.S.
Healthcare IT Today
NOVEMBER 22, 2023
IKS’s cloud-based, HIPAA-compliant platform integrates with all EHR and Enterprise Practice Management systems. “Our award-winning solutions have been recognized by KLAS and Black Book as market-leading, highlighting our ability to drive superior outcomes for our clients. India , Australia , Canada , and the U.K.
Hospitals 103
103 
How AI Can Help with Patient Self-Scheduling
HIT Consultant
NOVEMBER 9, 2023
Meanwhile, healthcare staff are drowning in relentless scheduling calls and laborious booking procedures that leave them exhausted and burnt out. This means the burden still falls on overburdened staff members to book complicated appointments that EHR templates can’t automate. Clearly, the current system isn’t working for anybody.
Compliance 95
95 
Medtronic & Edward-Elmhurst Health Sued Over Web Tracker Use
HIPAA Journal
SEPTEMBER 7, 2023
Edward-Elmhurst Health -was filed in Cook County Circuit Court and alleges patient privacy was violated due to the use of the Meta Pixel tracking tool on its web portals, which patients use for booking appointments and finding treatment facilities and other healthcare services.
HIPAA 62
62 
Privacy and the New Health Ciitizen
Health Populi
AUGUST 19, 2019
HIPAA, the Health Insurance Portability and Accountability Act that was legislated in 1996, isn’t sufficiently robust to deal with the nature of this health information 23 years after that law was first implemented. FYI, she was a valuable peer reviewer for the health care privacy chapter in my book, HealthConsuming.
Starting a Medical Practice? Consider These 4 Factors (Plus 1)
Compliancy Group
FEBRUARY 10, 2023
The second habit in the now-ubiquitous book “The 7 Habits of Highly Effective People” is “Begin With the End In Mind.” Speaking of cashflows… Make Sure You’re HIPAA Compliant Running a successful practice is hard enough without having to worry about HIPAA. Let us help ease the burden with automated software! Please Wait.
HIPAA 52
52 
Microsoft Cloud for Healthcare will be generally available October 30
Healthcare IT News - Telehealth
SEPTEMBER 23, 2020
The system also incorporates the Bookings app into Microsoft Teams, which is HIPAA-compliant, to smooth the process of conducting telehealth appointments. Care teams can use FHIR, IoT, EHR and other applications to make decisions around patient treatment plans, according to the company.
COVID-19 175
175 
Let's personalize your content